simple-repository/simple-repository має індекс здоров’я 53 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (76/100), найнижчий — AI Readiness (42/100). Останнє оновлення було 251 день тому. Більшість нещодавньої роботи виконує один учасник.
53
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
53
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 52 калібровано до 53 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25
Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
8
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей pypi:simple-repository@0.11.1 — тим, що тягне за собою встановлення опублікованого пакета, — 8 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Типізований код — Python з конфігурацією перевірки типів (simple_repository/py.typed)
55/55
Керовані розміри файлів — 0/55 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_language
Python
largest_source_bytes
18 792
source_files_sampled
55
oversized_source_files
0
Ключові факти
22зірок GitHub
4контриб'юторів
30комітів за останні 12 місяців
251днів від останнього пушу
9релізів
1бас-фактор
8відкритих issue
PyPIпакетних екосистем
Попередження щодо збору даних
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 4 ⇿
0Зірки
4Форки
5Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 2Патчі 3
Кожна точка охоплює 2 днів.
OpenSSF Scorecard 3.9 / 10
3.9сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-26 17:29 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 4 прямих і 0 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Реєстр
Пакет
Версія
Зв'язок
PyPI
aiosqlite
—
пряма
PyPI
httpx
—
пряма
PyPI
packaging
—
пряма
PyPI
typing-extensions
—
пряма
Сповіщення про залежності 0
Встановлення pypi:simple-repository@0.11.1 тягне 8 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 702,
"has_wiki": true,
"homepage": null,
"languages": {
"Python": 264505
},
"pushed_at": "2025-11-17T10:58:33Z",
"created_at": "2023-07-18T08:06:57Z",
"owner_type": "Organization",
"updated_at": "2026-01-24T19:16:32Z",
"description": "The core simple repository (PEP-503) interface, including powerful component implementations suitable for use in repository clients and servers",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "simple-repository",
"company": null,
"location": null,
"followers": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/139751045?v=4",
"created_at": "2023-07-17T08:21:40Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 1105
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2025-11-17T10:58:34Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2025-10-29T07:59:22Z"
},
{
"tag": "v0.10.3",
"kind": "patch",
"published_at": "2025-09-24T03:46:51Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2025-09-18T09:01:21Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2025-09-16T11:24:28Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-09-16T03:43:54Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-06-12T04:48:07Z"
},
{
"tag": "v0.8.3",
"kind": "patch",
"published_at": "2025-03-20T09:39:00Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2025-03-20T09:29:14Z"
}
],
"recent_commits": [
{
"oid": "18a4d2d9faae00ea6edec6fe7ba9b1c4cb0e5550",
"body": "Fix private metadata crash when merged from multiple repos",
"is_bot": false,
"headline": "Merge pull request #42 from simple-repository/fix/private-meta-crash",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-11-17T10:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3adfdc229efc06cac04f4f9f4c49fe82c67df7a",
"body": null,
"is_bot": false,
"headline": "Do not raise when converting private metadata if already converted",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2025-11-17T10:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3046dd299506b8f5dd1ffe8f4d45308094ae98fc",
"body": null,
"is_bot": false,
"headline": "Parametrize merged repo test to trigger JSONMapping exception",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2025-11-17T10:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "572760dea34681ee28885e170f200dd7b11dcf02",
"body": "Support multiple yank patterns for the same project",
"is_bot": false,
"headline": "Merge pull request #41 from simple-repository/feature/multi-yank-pattern",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-10-29T07:58:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "602469e14dd94a85377189d25488743175900cf5",
"body": null,
"is_bot": false,
"headline": "Switch the iteration order for performance reasons",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-10-29T07:56:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7c72d0f9410ef16e2e271281f8cc6433a577fc2",
"body": "… pairs for the same project",
"is_bot": false,
"headline": "Support dictionary in yank rules for configuring multiple rule-reason…",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2025-10-24T08:24:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "451a7aa27807b4c2d42f514cee3579e757061fa1",
"body": null,
"is_bot": false,
"headline": "Fail faster on yank config format validation",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2025-10-24T07:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89ebe34c219cf5a5c3d260499c95001ac4da9660",
"body": null,
"is_bot": false,
"headline": "Ignore pycache",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2025-10-24T07:51:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "affa349b53a24ed6e3e38e55275b4866576f129e",
"body": "Enable follow redirects by default",
"is_bot": false,
"headline": "Merge pull request #40 from pelson/fix/follow-redirects",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-23T15:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f16dc20f3596ac149bfc47d88858e81a2ea0c1be",
"body": null,
"is_bot": false,
"headline": "Enable follow redirects by default",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-23T15:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d67121aa8a96efe0d818651d5cc0bba17eb450c0",
"body": "Follow redirects when fetching resources",
"is_bot": false,
"headline": "Merge pull request #39 from pelson/fix/follow-redirects",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-23T15:36:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7786c29e40487cee4e6e11730cd7b3a3eb9036d7",
"body": null,
"is_bot": false,
"headline": "Follow redirects when fetching resources",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-23T15:35:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a61f0f70106fc0ee991a85ec5ec7717d74cffc",
"body": null,
"is_bot": false,
"headline": "Configure ruff in pyproject.toml instead of pre-commit",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-23T15:18:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "180ae135707a6341d8a691be900d42457ce0c563",
"body": "Verify that `httpx.Auth` will work for get_resource.",
"is_bot": false,
"headline": "Merge pull request #38 from pelson/feature/remote-auth",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-18T07:05:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a91d84dc9668a7cb79cee59a2658b91518448511",
"body": "…epository-server to resolve #35",
"is_bot": false,
"headline": "Verify that will work for get_resource. This can be used in simple-r…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-18T07:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed5c83c33fda8ae1b55a73e1ad4c452b6928b951",
"body": "Apply ruff formater and checker in pre-commit",
"is_bot": false,
"headline": "Merge pull request #37 from simple-repository/feature/ruff-formatting",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-18T03:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27701c85f2a1fd364c68d46e97fc36c32feb3f56",
"body": null,
"is_bot": false,
"headline": "Apply ruff formater and checker in pre-commit",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-18T02:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "058bbefaa80dc6d03ce8c4a62447e603d66e91ab",
"body": "…a-setter\n\nAdd a repository component which is able to add private metadata to a project result",
"is_bot": false,
"headline": "Merge pull request #36 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-18T02:04:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acfdd2f32fa56530c25ef377e53d0983f391dc73",
"body": "… project result. In practice, this is used in the repository browser to render information, if the metadata is set. Furthermore, ensure that private metdata persists through merging",
"is_bot": false,
"headline": "Add a repository component which is able to add private metadata to a…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-18T02:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05afa3535f90ca83f712e2a3f24ab9378746e6ca",
"body": "…dRepository.get_resource\n\nImplement MergedRepository.get_resource",
"is_bot": false,
"headline": "Merge pull request #34 from simple-repository/feature/implement-Merge…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T11:22:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3be60061756ebcf5f58af79809f1a00a075b389",
"body": "…ed due to the buggy behaviour of PrioritySelectedProjectsRepository.get_resource (which was fixed in https://github.com/simple-repository/simple-repository/pull/32)",
"is_bot": false,
"headline": "Implement MergedRepository.get_resource, which previously wasn't need…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T11:20:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05a08d92cfe51fec7364cbf64d0e658b32423c7f",
"body": "Remove the SimpleRepository metaclass",
"is_bot": false,
"headline": "Merge pull request #29 from simple-repository/fix/remove-metaclass",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T03:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "986c687c8f32f6b5b69ac128a9d4feb3bcadfaf7",
"body": "…esources\n\nFix the LocalRepository to raise PackageNotFound when it does not have the project at all",
"is_bot": false,
"headline": "Merge pull request #33 from simple-repository/fix/priority-selected-r…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T03:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8388cfa2609afbe059b1493d4f62b8de24a8d76d",
"body": "…e the project at all.",
"is_bot": false,
"headline": "Fix the LocalRepository to raise PackageNotFound when it does not hav…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T03:17:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d85e31d827bd60f421d3da6934fb7891d0c467d6",
"body": "…esources\n\nFix PrioritySelectedProjectsRepository resource retrieval to follow first-seen policy",
"is_bot": false,
"headline": "Merge pull request #32 from simple-repository/fix/priority-selected-r…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T03:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "515895f33e0ad62054816faf0f931fb55ecb4b09",
"body": "… exception is expected to be raised",
"is_bot": false,
"headline": "Fix the http implementation of get_resource, now that PackageNotFound…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T03:07:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ccf8859a3bdda7229f2566af50ed206361cac71",
"body": "…he get_resource endpoint, and use this distinction in the priority merge to avoid bleeding resources from lower priority",
"is_bot": false,
"headline": "Distinguish between resource unavailable and project unavailable in t…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T02:53:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f4fb517e8177fa8f3a1d6ad10fda0951509f848",
"body": "…irst-seen policy\n\nThe get_resource method was incorrectly searching across all repositories for a resource, but should follow the same first-seen policy as get_project_page.\n\nIn the wild, I saw this when we released a wheel internally with the same name as one on pypi. Our one didn't include a metadata file, and when we went to fetch the metadata it was being taken from the pypi one. The result was incorrect dependendencies on install.",
"is_bot": false,
"headline": "Fix PrioritySelectedProjectsRepository resource retrieval to follow f…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-16T01:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36558c930e3c4020bc67322c7d552049e5751f51",
"body": "Handle egg version string which had some build information in the filename",
"is_bot": false,
"headline": "Merge pull request #31 from simple-repository/feature/egg-verion-string",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-01T13:42:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fe5c652d0fa23492d73f5a4124e18ed652292fc",
"body": "…ename",
"is_bot": false,
"headline": "Handle egg version string which had some build information in the fil…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-09-01T13:41:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42964448b5d06a38ed4f990cea4a5da9367b6f90",
"body": "…inject the current repository into the context, such that if you were trying to access a Metadata file, you would go back to the top of the repository chain to retrieve the full file. In practice, this is wrong - if higher up the chain the file is modified, we don't want that to be reflected in the\n[…]\nvel. The original motivation for doing this was to ensure that we were maximising our changes of hitting a cache, but this does not justify the incorrect behaviour, nor the complexity that it brought.",
"is_bot": false,
"headline": "Remove the SimpleRepository metaclass, it was there to automatically …",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-20T12:15:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b8aebcf9a84dbb5686f1115181cdd617a538169",
"body": "Expose enough information on the quarantined files to be able to give the user (and a browser) enough context",
"is_bot": false,
"headline": "Merge pull request #24 from simple-repository/feature/quarantine-context",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-12T04:25:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42afa313ccb42e31a734ed811a034cec21c0b28b",
"body": "… the user (and a browser) enough context",
"is_bot": false,
"headline": "Expose enough information on the quarantined files to be able to give…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-12T04:19:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd51ec7e59bc33c273c521ad251b6daa9621cff6",
"body": "…a-from-components\n\nEnsure that when merging two repositories, we persist the versions defined",
"is_bot": false,
"headline": "Merge pull request #22 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-05T08:36:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948c2bf68fbd3f5cc3e1b3d572a67307d2b97919",
"body": "…fined",
"is_bot": false,
"headline": "Ensure that when merging two repositories, we persist the versions de…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-05T08:31:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1286420c56830bda076e201988572cee4dbed79f",
"body": "…a-from-components\n\nOnly compute the versions when they aren't specified",
"is_bot": false,
"headline": "Merge pull request #21 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-05T03:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d866247c3571f777f07823146a5ddc884f7f0601",
"body": "… we bring through the version information from the JSON response",
"is_bot": false,
"headline": "Only compute the versions when they aren't specified, and ensure that…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-05T03:46:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4ff4f67f03b6d620e13d93a3b89fb3dde99a32b",
"body": "…a-from-components\n\nAllow versions to be passed to the ProjectDetail",
"is_bot": false,
"headline": "Merge pull request #20 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-05T03:28:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e7fb693ab6299af750a42d78d1cecd1fec79951",
"body": "…nt what is given to us by PyPI, which may include empty versions",
"is_bot": false,
"headline": "Allow versions to be passed to the ProjectDetail - we want to represe…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-05T03:27:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5098c416dabb4a14a54f6cef0001c0eb6d677c7",
"body": "…a-from-components\n\nSupport private metadata serialization to JSON",
"is_bot": false,
"headline": "Merge pull request #19 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T15:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "291e929d6b5999c9f1fb97a3fb6932ee0dce0f90",
"body": null,
"is_bot": false,
"headline": "Support private metadata serialization to JSON",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T15:48:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c0fb21900d5fa43fecd722c04075a15de228e8d",
"body": "…a-from-components\n\nPersist private metadata received via JSON",
"is_bot": false,
"headline": "Merge pull request #17 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T15:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f20c826222bf22ad8093345907ac0be0f3f1167",
"body": null,
"is_bot": false,
"headline": "Persist private metadata recieved via JSON",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T15:11:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dfef9bcb584ca4fa309932ec7fef11e6375dfdc",
"body": "…a-from-components\n\nInclude metadata about files removed from the release in the new release remover component",
"is_bot": false,
"headline": "Merge pull request #16 from simple-repository/feature/private-metadat…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T14:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85a292376f06dacd6ec931a1035eae6661bade46",
"body": "… being used",
"is_bot": false,
"headline": "Correct the type annotation for JSONMapping where a subclass could be…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T14:45:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b42f0c3db679152ce3a599493d6cabcc8cadf6",
"body": "…ase remover component",
"is_bot": false,
"headline": "Include metadata about files removed from the release in the new rele…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T14:35:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e77fd5d7a4157dd235ee95a4d001c277fe3c5681",
"body": "Implement a mapping which is immutable and JSON-like, and use it for controlled arbitrary private metdata",
"is_bot": false,
"headline": "Merge pull request #15 from simple-repository/feature/private-metadata",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T14:16:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bd526d284d9039bb99efe8a13605c3422a92054",
"body": null,
"is_bot": false,
"headline": "Have an ignore for Python 3.7",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T14:14:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6dac89563e542fd349db4615681433dbe0611fd6",
"body": null,
"is_bot": false,
"headline": "Review actions",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-06-04T12:45:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb2357701f8d29cda0d34a0676a6d56ef021bb18",
"body": null,
"is_bot": false,
"headline": "With thanks to ruff formatter",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-04-29T06:02:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbd2c68b3df4b7b18ee0972dc476d6baa954eb23",
"body": "…controlled arbitrary private metdata",
"is_bot": false,
"headline": "Implement a mapping which is immutable and JSON-like, and use it for …",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-04-29T06:00:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29cbbf46de9d622462e6d27c2e2f1a7f19cab970",
"body": "…memachine\n\nMention pypi-timemachine in the README",
"is_bot": false,
"headline": "Merge pull request #14 from simple-repository/feature/mention-pypi-ti…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-04-10T10:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f25ad343e30e8adb658eab5021b13f87efc0836",
"body": null,
"is_bot": false,
"headline": "Mention pypi-timemachine in the README",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-04-10T10:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e054482d7972a20c9688366a007e8709fbc3467e",
"body": "Add codespell support (config, workflow to detect/not fix) and make it fix few typos",
"is_bot": false,
"headline": "Merge pull request #6 from yarikoptic/enh-codespell",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-04-05T04:04:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44d96c0dec7ad3dc98144b2fa7ee873b52a52b23",
"body": null,
"is_bot": false,
"headline": "Remove the codespell workflow, since it will be covered by pre-commit",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-04-05T03:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac91a8ee71924e2248d263de45b6ac9a29d497d1",
"body": "…agically\n\n=== Do not change lines below ===\n{\n \"chain\": [],\n \"cmd\": \"codespell -w\",\n \"exit\": 0,\n \"extra_inputs\": [],\n \"inputs\": [],\n \"outputs\": [],\n \"pwd\": \".\"\n}\n^^^ Do not change lines above ^^^",
"is_bot": false,
"headline": "[DATALAD RUNCMD] run codespell throughout fixing few left typos autom…",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2025-04-05T03:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0edf0fc521db263c705b758aa258b713d4d35807",
"body": null,
"is_bot": false,
"headline": "add pragma to ignore wrog",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2025-04-05T03:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f684fe8246da8d8ae228be2586db011e7986e50",
"body": null,
"is_bot": false,
"headline": "Add pre-commit definition for codespell",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2025-04-05T03:58:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b62fc92d1aea5c075a24ed3227652e44b3dc7c09",
"body": null,
"is_bot": false,
"headline": "Add rudimentary codespell config",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2025-04-05T03:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a122a00b54afad1282d2005ae9a707bdad509ce5",
"body": null,
"is_bot": false,
"headline": "Add github action to codespell main on push and PRs",
"author_name": "Yaroslav Halchenko",
"author_login": "yarikoptic",
"committed_at": "2025-04-05T03:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2fdf3866c4a69ffcb39e28757f24d4ac1607250",
"body": null,
"is_bot": false,
"headline": "Create python-publish.yml",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-20T09:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f0dc1468c2dbf0b3b390118e080ae95bfc016cd",
"body": "Ensure that the versions are sorted before serializing",
"is_bot": false,
"headline": "Merge pull request #11 from simple-repository/fix/version-serialization",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-20T09:27:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ad0c441e01be01197cbf13802ff983f58e25a14",
"body": "…tps://github.com/simple-repository/simple-repository-server/actions/runs/13965770987/job/39095697888?pr=14 (for https://github.com/simple-repository/simple-repository-server/pull/14) relates",
"is_bot": false,
"headline": "Ensure that the versions are sorted before serializing. The job at ht…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-20T09:25:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abc487a90f1b469efb618f00bc2c10a6b2ea67c9",
"body": "Add static analysis to the test matrix",
"is_bot": false,
"headline": "Merge pull request #10 from simple-repository/feature/static-analysis",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-06T14:09:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd5787f24f0d7facaeb943c99922bb47bbe86110",
"body": null,
"is_bot": false,
"headline": "Add static analsysis to the test matrix",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-06T14:08:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc300be4e072335987e426511865f372710659c4",
"body": "Use github actions for testing",
"is_bot": false,
"headline": "Merge pull request #8 from simple-repository/pelson-patch-1",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-05T12:05:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33b17fd84bedde3415e09181fe24639bcf98afdc",
"body": null,
"is_bot": false,
"headline": "Use github actions for testing",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-05T12:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8a10b6aa43f8e361e4bb356fb648daf18a58051",
"body": "* github/main:\n Update from 28e5b1d\n Drop the license header pre-commit job\n Update from 0ff324c\n Update from 19ce6a9\n Update from 15ffbdb\n Update from ba3e7d5\n Repository update 1929a6c\n Resize the image\n Repository update 8e102baa1f4badb2849dc68eca339868b515178d\n Refine the readme\n Add a README\n Update from 47d7e1e\n Initial code commit\n Initial commit",
"is_bot": false,
"headline": "Merge remote-tracking branch 'github/main' into main-2025",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-05T09:38:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6db66352124a9b047b0b23abae5884b32af043b5",
"body": null,
"is_bot": false,
"headline": "Initial code commit",
"author_name": "Ivan Sinkarenko",
"author_login": "ivany4",
"committed_at": "2025-03-05T09:37:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bceb8269c549b3b5e9a8371e34a80c093c696be",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-05T09:34:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f62bb56e04950fbd23532cf053f2c67ff2ae177",
"body": "Fix the static analysis lint\n\nSee merge request acc-co/devops/python/package-index/simple-repository!44",
"is_bot": false,
"headline": "Merge branch 'feature/fix-pipeline' into 'master'",
"author_name": "Philip Elson",
"author_login": "pelson",
"committed_at": "2025-03-04T16:13:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e2848d58d25814f29a3aa76cb69219299bf3e7e",
"body": null,
"is_bot": false,
"headline": "Fix the static analysis lint",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2025-03-04T16:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49311702f02ffe879d2e823217fb975a617aac03",
"body": null,
"is_bot": false,
"headline": "Update from 28e5b1d",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-19T15:25:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28e5b1d2ac8364a7d59a977429e8c776a0236253",
"body": "Allow querystrings that are passed to the Http component to persist that information for page URLs\n\nSee merge request acc-co/devops/python/package-index/simple-repository!40",
"is_bot": false,
"headline": "Merge branch 'feature/http-url-qs-preserved' into 'master'",
"author_name": "Philip Elson",
"author_login": "pelson",
"committed_at": "2024-09-19T14:55:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f9efc0997e31ced7898e49a42822f81a8657c33",
"body": null,
"is_bot": false,
"headline": "Factor out the URL path append functionality",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-19T13:47:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae58193bf61201bb44ec534c0fbc4cdabecbc81d",
"body": null,
"is_bot": false,
"headline": "Make repository_url private in the Http component",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-19T13:32:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fca96324da5d775350f28c3a88919b2a144fc413",
"body": "…hat information for page URLs",
"is_bot": false,
"headline": "Allow querystrings that are passed to the Http component to persist t…",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-19T13:32:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56a1a3967c5e681a408f73b4bd31d1f71c73b15b",
"body": "Add compatibility with Python 3.7/3.9\n\nSee merge request acc-co/devops/python/package-index/simple-repository!41",
"is_bot": false,
"headline": "Merge branch 'feature/py37-support' into 'master'",
"author_name": "Philip Elson",
"author_login": "pelson",
"committed_at": "2024-09-19T09:59:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5cd3067ba699bba4fcb3e883b690d8f52636e8c",
"body": "… versions",
"is_bot": false,
"headline": "Add an additional mypy CI job that will check against multiple Python…",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36e73b0e252a0604d8b61d347ce0dc8ff4a48c9d",
"body": null,
"is_bot": false,
"headline": "Update classifiers",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ba7f4a7a59f224a3065f6ff7f294680d013c138",
"body": null,
"is_bot": false,
"headline": "Run tests against all supported Python versions",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c91514a5ef5610780b9df4154e95d5333784a3ee",
"body": null,
"is_bot": false,
"headline": "Add AsyncMock replacement for 3.7 tests",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "317eb026e2645935367dcea7c6483ca439004279",
"body": null,
"is_bot": false,
"headline": "Lower down required Python version to 3.7",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "596018abeae2e19bee19166e526aad15f9ed8dc6",
"body": null,
"is_bot": false,
"headline": "Use 3.7-compatible hash calculation",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:17:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "187fb8d63ee3b38b19d8c4b8d5a1378462995bbb",
"body": null,
"is_bot": false,
"headline": "Stop using 3.9+ path methods",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:16:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54565a83825e895087f435319a9f4a93aaffb565",
"body": null,
"is_bot": false,
"headline": "Stop using 3.9+ string methods",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:03:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1df851c2efcc9b734e3c424ae1344a9d4b32a7f0",
"body": null,
"is_bot": false,
"headline": "Stop using compound with statements",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:03:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "395699787e0df4b2f5e883b53e400c8722b5a3f4",
"body": null,
"is_bot": false,
"headline": "Stop using kw_only arguments available from Python 3.10",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7183ab16627b7cd08a8fc3deada1162345a967d4",
"body": null,
"is_bot": false,
"headline": "Stop using union operator for dictionaries",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-19T09:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dafa7ad2664dee6d61083943164f9492ac7a5bda",
"body": null,
"is_bot": false,
"headline": "Use Python 3.7-compatible type annotations",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-18T15:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "467f6c6bd2a96b274bc25f2b2c8dc5ee2def3aec",
"body": null,
"is_bot": false,
"headline": "Stop using walrus operator",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-18T15:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36f10ac85ef0fa3ae65894dc00eb1142253de44d",
"body": null,
"is_bot": false,
"headline": "Use post-3.7 typing primitives through the compat layer",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-18T15:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9f957798b386043847156dde4716419f1b90dd6",
"body": null,
"is_bot": false,
"headline": "Reuse fixtures in tests",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-18T15:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4dddb98109b8114f5fb9b529e4e6eea63a5f97e",
"body": null,
"is_bot": false,
"headline": "Make delayed annotations and unify type imports",
"author_name": "Ivan Sinkarenko",
"author_login": null,
"committed_at": "2024-09-18T15:54:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e129be89546171d36604bc714b82b65a30e581e",
"body": "Improve the preparation for open-sourcing\n\nSee merge request acc-co/devops/python/package-index/simple-repository!39",
"is_bot": false,
"headline": "Merge branch 'fix/trailing-slash-http' into 'master'",
"author_name": "Philip Elson",
"author_login": "pelson",
"committed_at": "2024-09-10T11:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e54cb33e17ba04eebc4f16bbb98c78af061f3b08",
"body": null,
"is_bot": false,
"headline": "Improve the preparation for open-sourcing",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-10T11:46:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49d6a2f0b051e0e6401ac33c3164650b9d300831",
"body": null,
"is_bot": false,
"headline": "Drop the license header pre-commit job",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-10T11:44:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a26d354c173cf6546a0186f5ac0f047c7ab79f",
"body": null,
"is_bot": false,
"headline": "Update from 0ff324c",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-10T11:43:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "147275c9592d95cb3a09a590ae7ac71aa7925350",
"body": "Minor project setup improvements\n\nSee merge request acc-co/devops/python/package-index/simple-repository!38",
"is_bot": false,
"headline": "Merge branch 'feature/project-infra' into 'master'",
"author_name": "Philip Elson",
"author_login": "pelson",
"committed_at": "2024-09-10T11:36:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ff324c3724be752fb8bfd8956eee2873ff704d1",
"body": null,
"is_bot": false,
"headline": "Minor project setup improvements",
"author_name": "Phil Elson",
"author_login": "pelson",
"committed_at": "2024-09-10T11:35:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 9,
"commits_last_year": 30,
"latest_release_at": "2025-11-17T10:58:34Z",
"latest_release_tag": "v0.11.1",
"releases_from_tags": false,
"days_since_last_push": 251,
"active_weeks_last_year": 6,
"days_since_latest_release": 251,
"mean_days_between_releases": 30.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "simple-repository",
"exists": true,
"license": null,
"keywords": [
"Development Status :: 5 - Production/Stable",
"Operating System :: POSIX",
"Programming Language :: Python :: 3",
"Typing :: Typed"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/simple-repository/",
"is_deprecated": false,
"latest_version": "0.11.1",
"repository_url": "https://github.com/simple-repository/simple-repository",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 4558,
"first_published_at": "2023-07-18T17:19:35.432506Z",
"latest_published_at": "2025-11-17T10:59:15.908451Z",
"latest_version_yanked": null,
"days_since_latest_publish": 251
}
]
},
"popularity": {
"forks": 4,
"stars": 22,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2025-01-14",
"count": 1
},
{
"date": "2025-08-05",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
}
],
"complete": true,
"collected": 4,
"total_forks": 4
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"simple_repository/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 18792,
"source_files_sampled": 55,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 8,
"malicious_count": 0,
"assessed_package": "pypi:simple-repository@0.11.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
},
{
"name": "aiosqlite",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
},
{
"name": "packaging",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": null
},
{
"name": "typing_extensions",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.4.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "aiosqlite",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": true,
"version": null,
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": true,
"version": null,
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 4,
"direct_count": 4,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 25,
"open_issues": 8,
"closed_ratio": 0.2,
"closed_issues": 2,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "pelson",
"commits": 166,
"avatar_url": "https://avatars.githubusercontent.com/u/810663?v=4"
},
{
"type": "User",
"login": "yarikoptic",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/39889?v=4"
},
{
"type": "User",
"login": "ivany4",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/231519?v=4"
},
{
"type": "User",
"login": "Pinzauti",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/16691846?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.954
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"python-publish.yml",
"python-test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/12 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 33 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "18a4d2d9faae00ea6edec6fe7ba9b1c4cb0e5550",
"ran_at": "2026-07-26T17:29:18Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2025-11-17T10:59:19Z",
"oldest_open_prs": [
{
"number": 27,
"created_at": "2025-06-19T10:04:40Z",
"last_comment_at": "2025-06-20T12:22:44Z",
"last_comment_author": "pelson"
},
{
"number": 30,
"created_at": "2025-06-20T15:18:53Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2025-11-17T10:56:40Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 12,
"created_at": "2025-03-21T07:31:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 13,
"created_at": "2025-04-07T18:42:45Z",
"last_comment_at": "2025-09-18T02:06:38Z",
"last_comment_author": "pelson"
},
{
"number": 18,
"created_at": "2025-06-04T15:14:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 23,
"created_at": "2025-06-05T08:39:18Z",
"last_comment_at": "2025-06-05T09:19:24Z",
"last_comment_author": "pelson"
},
{
"number": 25,
"created_at": "2025-06-12T05:34:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2025-06-18T03:31:00Z",
"last_comment_at": "2025-09-16T01:54:04Z",
"last_comment_author": "pelson"
},
{
"number": 28,
"created_at": "2025-06-20T10:29:44Z",
"last_comment_at": "2025-12-28T07:17:46Z",
"last_comment_author": "pelson"
},
{
"number": 44,
"created_at": "2026-06-02T16:27:41Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/simple-repository/simple-repository",
"host": "github.com",
"name": "simple-repository",
"owner": "simple-repository"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 52 is calibrated to 53 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 52,
"calibrated": 53,
"calibration": "2026-08-02"
}
}
],
"value": 53,
"inputs": {
"security": 51,
"vitality": 44,
"community": 43,
"governance": 49,
"calibration": "2026-08-02",
"engineering": 76,
"ai_readiness": 42,
"weighted_overall_raw": 52
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 44,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"commits_last_year": 30,
"human_commit_share": 1,
"days_since_last_push": 251,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 251 days ago",
"points": 3.6,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 251
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "30 commits in the last year",
"points": 13.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 30
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 78,
"inputs": {
"releases_count": 9,
"latest_release_tag": "v0.11.1",
"releases_from_tags": false,
"days_since_latest_release": 251,
"mean_days_between_releases": 30.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "9 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 9
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 251 days ago",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 251
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~30.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 30.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"recent_release",
"dependencies_clean"
],
"signals": [
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 2,
"unanswered_open_issues": 3,
"days_since_last_merged_pr": 258,
"days_since_last_human_commit": 258,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 258 days, with nothing left unanswered; held at dormant by a release within the year, no affected dependency",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 258
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "a release within the year, no affected dependency"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 43,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"forks": 4,
"stars": 22,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "22 stars",
"points": 21.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 22
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "4 forks",
"points": 4,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 4
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"simple-repository"
],
"dependents": null,
"ecosystems": "pypi",
"total_downloads": null,
"monthly_downloads": 4558
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,558 downloads/month across pypi",
"points": 48.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4558,
"ecosystems": "pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.954
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 95% of commits",
"points": 1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 95
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 33 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "weak",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"merged_prs": 25,
"open_issues": 8,
"closed_issues": 2,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.2,
"closed_unmerged_prs": 1,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "20% of issues closed",
"points": 8.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 20
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "25/26 decided PRs merged",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 25,
"decided": 26
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/12 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 8,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "simple-repository",
"public_repos": 4,
"account_age_days": 1105
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "8 followers of simple-repository",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 8,
"login": "simple-repository"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~3 yr old",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"packages": [
"simple-repository"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 251
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 251 days ago",
"points": 26,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 251
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "16 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 16
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "exceptional",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/12 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 33 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:simple-repository@0.11.1 runtime dependency closure — what installing the published package pulls in — 8 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:simple-repository@0.11.1",
"assessed": 8
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 8,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 8,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 42,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.38,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "38 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 20.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 38,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"simple_repository/py.typed"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "simple_repository/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "simple_repository/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 18792,
"source_files_sampled": 55,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (simple_repository/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "simple_repository/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/55 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 55,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-26T17:29:34.881803Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/simple-repository/simple-repository.svg",
"full_name": "simple-repository/simple-repository",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з simple-repository/simple-repository. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.3.1, схема v0.27.0 — повна методологія · вікі метрик.
