WilliamSmithEdward / pyOpenVBA

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

{
  "data": {
    "repo": {
      "topics": [
        "compound-file",
        "deterministic",
        "excel",
        "file-format",
        "office-automation",
        "openxml",
        "pure-python",
        "python",
        "roundtrip",
        "vba",
        "vba-macros",
        "xlam",
        "xls",
        "xlsb",
        "xlsm",
        "zero-dependencies",
        "macro-extraction",
        "ms-cfb",
        "ms-ovba"
      ],
      "is_fork": false,
      "size_kb": 3153,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Python": 628942,
        "PowerShell": 35285
      },
      "pushed_at": "2026-08-02T05:36:10Z",
      "created_at": "2026-05-22T05:32:58Z",
      "owner_type": "User",
      "updated_at": "2026-08-02T05:36:20Z",
      "description": "Pure-Python reader/writer for VBA macros embedded in Excel / PowerPoint / Word files. Zero dependencies, deterministic round-trip, safe on protected and signed projects.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": null,
      "name": "William Smith",
      "type": "User",
      "login": "WilliamSmithEdward",
      "company": null,
      "location": "United States",
      "followers": 12,
      "avatar_url": "https://avatars.githubusercontent.com/u/116382973?v=4",
      "created_at": "2022-10-21T18:14:34Z",
      "is_verified": null,
      "public_repos": 52,
      "account_age_days": 1380
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.2.0",
          "kind": "minor",
          "published_at": "2026-08-02T05:37:12Z"
        },
        {
          "tag": "v3.1.0",
          "kind": "minor",
          "published_at": "2026-07-23T06:09:48Z"
        },
        {
          "tag": "v3.0.1",
          "kind": "patch",
          "published_at": "2026-05-25T07:30:32Z"
        },
        {
          "tag": "v3.0.0",
          "kind": "major",
          "published_at": "2026-05-25T06:56:26Z"
        },
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2026-05-24T22:46:36Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2026-05-24T21:21:37Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2026-05-22T19:27:42Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-05-22T11:51:04Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-05-22T09:41:09Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-05-22T08:04:04Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "0fbcd18b7699cec7b44cf1399c60b44914fd7284",
          "body": "Release 3.2.0: issue #5 performance work",
          "is_bot": false,
          "headline": "Merge pull request #6 from WilliamSmithEdward/perf-3.2.0",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-08-02T05:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2930c01e5fca0101d686fef171aba654807ca404",
          "body": null,
          "is_bot": false,
          "headline": "release prep: 3.2.0 version bump and changelog",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-08-02T05:33:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0d0a511970f554ab07c9ee1ee8a226cdfca8f904",
          "body": "Decompression dominated project opening (88-96% per the issue's\nprofile). Two changes, both output-preserving:\n\ndecompress now produces output with slice operations wherever the spec\nallows: non-overlapping copy tokens (offset >= length) move as one\nslice, runs of literal tokens within a flag byte e\n[…]\nuntouched\nmodules (tested).\n\nVerified byte-identical end to end: the 25-case save matrix across all\nlive fixtures hashes identically against a v3.1.0 worktree baseline,\nand the live Excel gate passes.",
          "is_bot": false,
          "headline": "perf: 1.76x byte-identical decompress and lazy module source (issue #5)",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-08-02T05:33:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d1f1a88a7075a084be501e1f4e9200cf1c1e0dd9",
          "body": "Release 3.1.0",
          "is_bot": false,
          "headline": "Merge pull request #3 from WilliamSmithEdward/release-3.1.0",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T06:08:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bccd30c51f56640e7af288f800ad96ff463dcae7",
          "body": "git add --renormalize only touches tracked files, so the new\n.gitattributes never entered the index and the prior commit landed\nwithout it.",
          "is_bot": false,
          "headline": "chore: add the .gitattributes file the previous commit described",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T06:06:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "996ab3a2eec0f6f8315962c2cfbef0575a5ad997",
          "body": "…fixes\n\nUpdate the README architecture block and docs/architecture.md for the\nVBAHostFile consolidation (the layering diagram still showed three\nstandalone facades) and add the access_read / vba_pcode modules the\nREADME listing had omitted.\n\nAdd .gitattributes: text=auto normalization (the index is \n[…]\ns reachable in both vbaProject.bin and nested legacy\nlayouts). AccessReader.pull_modules now scans the database once\ninstead of four times and drops a stale comment about delegating to\nexport_modules.",
          "is_bot": false,
          "headline": "docs and polish: shared-host architecture docs, gitattributes, small …",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T06:06:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "599f081382d6eec1f33d6a6fe49b010b7d6d3022",
          "body": "_encode_lz scanned the entire window at every position: quadratic per\n4096-byte chunk, 0.44 s to compress the 17 KB large-module fixture and\nroughly half a minute for a megabyte of source. A 3-gram position\nindex now replaces the scan: 0.007 s on the fixture, 0.4 s on a 1 MB\ninput.\n\nOutput bytes are\n[…]\nncoder against a naive\nreference implementation across random, repetitive, VBA-like, and\nboundary inputs, alongside the existing Access sample-040 parity test\nand the 25-case differential save matrix.",
          "is_bot": false,
          "headline": "perf(vba): 3-gram position index for the LZ encoder, byte-exact",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T06:05:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c9423d45721a358247279c299783ba0a150e9ae",
          "body": "Full 3.1.0 changelog entry covering the class-source normalization\nfix, CFB storage scoping, deterministic saves, the facade\nconsolidation, CLI routing, the live Excel gate, and the hygiene\nbatch. README gains the live-gate instructions in Contributing and\ndrops the wrong project name from the support section.",
          "is_bot": false,
          "headline": "docs: changelog and README for 3.1.0",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:56:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ede848bac722a1b8dda2f893c0dec3fb9eb40dae",
          "body": "Issue #1 shipped because the strongest live verification was \"opens\nin Excel without a repair prompt\": the broken class module opened\nfine and only failed when the compiler reached New Class1. This gate\ncloses that gap. It builds a workbook whose macro instantiates a\nclass added from VBE-export-form\n[…]\nwatcher that\ndismisses and logs any VBE modal so a compile-error dialog becomes a\ncaptured failure message instead of a deadlock.\n\nOpt-in via RUN_LIVE_EXCEL=1 on Windows; skipped by default and in CI.",
          "is_bot": false,
          "headline": "test: opt-in live Excel compile-and-run gate",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:56:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb8818aa2e80e9fd2aa0b5ced82804e98a9ac818",
          "body": "get_stream_in_storage, write_stream_in_storage, and\nlist_streams_in_storage verified the storage existed and then\nlinear-scanned the entire directory for the first name match. A\nsame-named stream in a different storage could shadow the intended\none (two UserForms both carry o and f streams), and roo\n[…]\n children only, and root\nsiblings (PROJECT, PROJECTwm) are no longer reported as VBA-storage\nchildren. Byte output for well-formed files is unchanged (same\n25-case hash matrix as the facade refactor).",
          "is_bot": false,
          "headline": "fix(cfb): scope storage lookups to the storage's child subtree",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:56:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4b8b14dd4ca17c334c0127680b283600fc95d530",
          "body": "ExcelFile, WordFile, and PowerPointFile were ~460-line near-copies;\nthe safety-critical save() pipeline and the issue #1 class\nnormalization had to be hand-synchronized across three files (drift\nhad already crept in: ExcelFile carried a dead _zip_bytes attribute\nthe others lacked). All shared behavi\n[…]\nfied byte-identical against the previous implementation: a\n25-case save matrix (noop/edit/add/rename/delete over the xlsm, xlsb,\nxls, docm, and pptm live fixtures) hashes identically before and\nafter.",
          "is_bot": false,
          "headline": "refactor: single VBAHostFile base for the three host facades",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:56:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bd2869eb5fa30f41740a1c8c3223e58f8aa7c4f",
          "body": "…exports\n\npull, push, and ls previously hardcoded ExcelFile, so pointing them at\na .docm or .pptm raised UnsupportedFormatError even though the library\nsupports those hosts. All three now resolve the host class from the\nsame extension map disasm uses. The map drops .xltm and .ppam (no\nfacade accepts\n[…]\nclassification\ninstead of everything being written as .bas.\n\nNew tests/test_cli.py covers routing, the unsupported-suffix exit\ncode, a Word pull/edit/push round trip, and Access export\nclassification.",
          "is_bot": false,
          "headline": "fix(cli): route pull/push/ls by host extension; classify access-pull …",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:56:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "82366b1a07c34ba0bccf7c7066743fe7da3e1360",
          "body": "Bump pyproject and __version__ to 3.1.0. __version__ had been stale at\n2.0.0 while PyPI shipped 3.0.x; tests/test_version.py now pins it to\nthe installed package metadata so the two sources cannot drift again.\n\nAdd Python 3.14 to the CI matrix (the classifiers already claimed it;\nthe suite passes locally on 3.14.6). Fix roadmap.md's link to the\nfeature-gate matrix, which pointed outside docs/. Remove the committed\n_pytest.log and Access .laccdb lock files and gitignore both patterns.",
          "is_bot": false,
          "headline": "release prep: version 3.1.0, drift guard, CI 3.14, repo hygiene",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:56:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e195a5c12855272b62b5b2e285418c137d98583",
          "body": "…-from-module\n\nfix: normalize class module sources to stream form (issue #1)",
          "is_bot": false,
          "headline": "Merge pull request #2 from WilliamSmithEdward/Can't-instantiate-class…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:31:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b122783a62170ee78b04932da09d07ac2e76bbb",
          "body": "VBE-exported .cls files are in file-export form: a leading\nVERSION 1.0 CLASS / BEGIN / END preamble and no Attribute VB_Base\nline. Module streams need the opposite: no VERSION preamble, with\nVB_Base. add_module, set_module, and push_modules wrote supplied\nheaders into the stream verbatim, so class m\n[…]\n-body and standard-module paths are unchanged.\n\n19 new tests (356 pass, pyright strict and ruff clean). The\nreporter's exact fixtures rebuilt with this change compile and\nrun RunFixture in live Excel.",
          "is_bot": false,
          "headline": "fix: normalize class module sources to stream form (issue #1)",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-07-23T05:29:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9e4fdd85cfa9e7a7813d8d90046f248219506302",
          "body": "Add support open source section to README",
          "is_bot": false,
          "headline": "Add support open source section to README",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-06-04T08:35:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "614e97f364e01459f9423e5adf118a61696bf9ee",
          "body": null,
          "is_bot": false,
          "headline": "Release v3.0.1: fix PyPI README links",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T07:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07ebe8ff5145dd52cab322ed4a9de3eabc87e4c7",
          "body": null,
          "is_bot": false,
          "headline": "docs: add Access read-only example to 30-second tour",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T07:19:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "043aaac7eabadff92ee7b901e5a24617e411262b",
          "body": "…oids upstream rate limiting)",
          "is_bot": false,
          "headline": "docs: switch downloads badge from shields.io/pypi/dm to pepy.tech (av…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T07:05:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "908a964bb2be769069d68c9760e9e32c76895740",
          "body": "refactor: remove unnecessary blank line in test_access.py",
          "is_bot": false,
          "headline": "docs: update README to clarify Access support as read-only",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T07:03:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d459b4b3da0e1167bb87ff1e1fab1280151d598d",
          "body": "…74 tests)",
          "is_bot": false,
          "headline": "tests: remove all RE-corpus-dependent tests (samples not committed; -…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T07:02:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7612ec718662f044cb3ba14d3eb13d752711650a",
          "body": "…committed)",
          "is_bot": false,
          "headline": "tests: remove RE-corpus-dependent tests that fail in CI (samples not …",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T06:58:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53bdbe0c39995ac9310e1a3c79cfd88e15f3730c",
          "body": "…e prune",
          "is_bot": false,
          "headline": "release v3.0.0: read-only AccessReader, strict lint+pyright, dead-cod…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T06:55:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d81efe49520e2b6bcf2e1fe54cc3aa0771b1bef9",
          "body": "- Implement `access_re_find_idents.py` to locate VBA identifier strings in Access files.\n- Create `access_re_find_string_intern.py` to hunt for string-literal interning tables.\n- Develop `access_re_find_vba_project.py` to identify the `_VBA_PROJECT` equivalent table.\n- Introduce `access_re_fingerpri\n[…]\nailer cookies.\n- Create `access_re_trailer_dump.py` to dump bytes around the ProcTrailer for specific samples.\n- Add `access_re_walk.py` to walk through LVAL chains and validate row-prefix hypotheses.",
          "is_bot": false,
          "headline": "Add scripts for Access VBA project analysis and row inventory",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T05:18:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "543df12ecd7e4ad3f7d245884e74bc9426b46941",
          "body": "…unctions\n\n- Introduced `pull_access` and `push_access` functions to handle VBA module extraction and updates for Access databases.\n- Enhanced `AccessFile` class with methods for setting and getting modules, preserving class attributes during replacements.\n- Implemented tests for the new functionali\n[…]\ntion.\n- Added demo scripts to showcase the new features and verify behavior in MS Access.\n- Created diagnostic scripts to investigate potential issues with OVBA blob handling and Access compatibility.",
          "is_bot": false,
          "headline": "Add AccessFile support for multiline source replacement and new API f…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T04:44:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "81ea5326c6e4a2cb8440fd61b79cd1d31fd6ecf2",
          "body": "…ding modules",
          "is_bot": false,
          "headline": "feat: implement MSysObjects write path for renaming, deleting, and ad…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T03:46:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94374b32304ca410c4bdc6c17c061560fc6a4507",
          "body": null,
          "is_bot": false,
          "headline": "Refactor code structure for improved readability and maintainability",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T03:36:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90fadd5fa79dd75bc64bf37eba0cc40bf685e174",
          "body": "…ptions",
          "is_bot": false,
          "headline": "feat: add source interleaving to disassembly output and enhance CLI o…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T02:41:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf9f657ee223b8fb0c043f49aaa0d81d514294d1",
          "body": "- Implemented access_re_find_cafe.py to search for CAFE magic in LVAL rows.\n- Created access_re_find_idents.py to locate known VBA identifier strings in both UTF-16-LE and ASCII formats.\n- Developed access_re_find_vba_project.py to identify the _VBA_PROJECT equivalent identifier table in Access.\n- A\n[…]\nced access_re_trailer_dump.py to dump bytes around the ProcTrailer for specific samples.\n- Added vba_pcode.py for disassembling VBA7 p-code streams, including opcode definitions and disassembly logic.",
          "is_bot": false,
          "headline": "Add scripts for analyzing VBA p-code in Access databases",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T02:29:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5c0486ebb545854f6613f6746bdfdcfe48be4ea",
          "body": "This script searches for string-literal interning tables and companion rows\nreferenced by the module-active p-code stream in Access database files. It\niterates through LVAL rows to identify those containing specific literal texts\nin both ASCII and UTF-16-LE encodings. The script also includes a hex dump\nfunction for visualizing the byte content of the found rows.\n\nUsage: Run from the repository root with `python scripts/access_re_find_string_intern.py`.",
          "is_bot": false,
          "headline": "Add script to find string-literal interning in Access databases",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T01:44:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42c4acf70d34b8127f433d93cdce09fc87b33a8b",
          "body": "…de rows\n\nThis new script, `access_re_pcode_diff.py`, allows for the comparison of p-code rows from different Access database samples. It utilizes a deterministic 12-byte active-row discriminator to print aligned byte differences, aiding in opcode reverse-engineering. The script fetches samples from a specified corpus and outputs detailed differences between selected pairs of samples, including their source code representations.",
          "is_bot": false,
          "headline": "feat: add script for side-by-side pairwise diff of module-active p-co…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T01:38:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2538c4baea2bf399a6f2fa57efe016ee1d3c2604",
          "body": "- Introduced `access_re_body_diff.py` to compare body-varying samples and identify length deltas and differences.\n- Added `access_re_compare_pcode_headers.py` to compare rU@ rows side-by-side for deterministic discrimination.\n- Created `access_re_dump_68_1.py` to hex-dump candidate p-code rows acros\n[…]\nCreated `access_re_list_pcode_rows.py` to list all rows starting with the 'rU@' p-code magic across selected samples.\n- Generated `scripts_fp_output.txt` to document findings from the corpus analysis.",
          "is_bot": false,
          "headline": "Add scripts for analyzing and fingerprinting VBA p-code across samples",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T01:31:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "582d38e788afcbf0404b488c2e3ee6c73fbea37b",
          "body": "…ing tests",
          "is_bot": false,
          "headline": "feat: implement MS-OVBA dir-stream catalog parsing and add correspond…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T01:13:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "793cb987e2268582911031c13f7f1d2e8bd9e8fb",
          "body": "…odule discovery",
          "is_bot": false,
          "headline": "feat: enhance LVAL row format decoding and add regression tests for m…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T01:03:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a4b8312d92b95d4459c9d50ca057061e80c2f842",
          "body": "- Introduced Module2 with sample VBA code for testing.\n- Created a manifest.json to track module details.\n- Added multiple Access database files for testing various scenarios.\n- Implemented comprehensive test suite in test_access.py to validate Access file handling, including reading and writing VBA modules.\n- Tests cover header validation, page reading, source row extraction, and text replacement functionality.",
          "is_bot": false,
          "headline": "Add new tests and modules for VBA Access functionality",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-25T00:49:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "865ceffeadc61070d97e9b9355a71b20819d1649",
          "body": null,
          "is_bot": false,
          "headline": "fix: pyright errors (re-export trick, make CLASS_MODULE_CLSID public)",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-24T22:48:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bed40e1ef46d09fa387c9b6add74eb0ce33d8c36",
          "body": null,
          "is_bot": false,
          "headline": "v2.0.1: synthesize_class_header, fix PyPI readme links",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-24T22:45:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b1277694d06411d8b1f3428578328f25453ec35d",
          "body": "…upport",
          "is_bot": false,
          "headline": "v2.0.0: add WordFile, PowerPointFile, xlsb create_new, class module s…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-24T21:20:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bca22f0834f5f8877a10fb5d174fef1c0dd4803",
          "body": null,
          "is_bot": false,
          "headline": "fix(vba): rename unused 'body' to '_body' to satisfy pyright strict",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T19:31:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e3b77215a00da0452d810f3de2a5909defb0f16",
          "body": "set_module() and add_module() now preserve / synthesize the leading\nAttribute VB_* (and VERSION ... CLASS) header so editing ThisWorkbook\nor Sheet1 source no longer strips host-binding metadata, which Excel\nsilently rejected by showing an empty module in the VBE.\n\n- vba.py: split_attribute_header() \n[…]\new TestAttributeHeaderPreservation class (10 tests)\n- scripts/bake_header_fix_live_tests.py: produces 6 live-test workbooks\n- live fixtures: workbook_only_module_test.xlsm, sheet_only_module_test.xlsm",
          "is_bot": false,
          "headline": "Release 1.1.1: preserve attribute headers on document module edits",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T19:27:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba57d588ae070c62af0be72edf558c779c23fd9d",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T12:06:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43dffb9f88be0d5069a66ccdcfb41e113c7b32d3",
          "body": "…plate\n\n- Add ExcelFile.create_new(path) classmethod that writes a fresh macro-enabled workbook from a baked-in empty template (ThisWorkbook + Sheet1 + empty Module1) and returns an open handle.\n\n- Template stored as zlib+base85 constant in src/pyopenvba/_templates/__init__.py (no binary fixtures in\n[…]\nwave, mandelbrot, plus a ~100 KB multi-chunk stress module exercising the MS-OVBA compressor well past the previous 16 KB empirical ceiling.\n\n- README, docs/architecture.md, docs/changelog.md updated.",
          "is_bot": false,
          "headline": "Release 1.1.0: ExcelFile.create_new() builds new .xlsm from baked tem…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T11:49:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b4cd5f1891e4e153702bffeee173dca41e56d4ee",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T10:36:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28a5611cd68d69a3507d676f79d033d872674eb8",
          "body": null,
          "is_bot": false,
          "headline": "tests: fix pyright strict errors (typed tmp_path, unused loop var)",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T09:50:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2027732a5b4ff4958b1afe60da2ff53f24f630d3",
          "body": "…n tag push",
          "is_bot": false,
          "headline": "ci: auto-create GitHub Release with changelog notes and dist assets o…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T09:39:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "090737fe1df66f487890214a930f86b05ad1cae4",
          "body": "- compress(): always emit token-compressed (flag=1) chunks for module\n  source, matching Office's empirical behaviour. Raw chunks (flag=0)\n  remained spec-legal but caused Excel's VBE to reject any multi-chunk\n  module with 'An error occurred while loading <Module>'. Raw chunks\n  remain a fallback o\n[…]\nve_excel_testing/large_vba_module.xlsm as an empirical\n  reference for multi-chunk Excel-authored modules.\n- Add regression tests covering both fixes (test_vba, test_gates).\n- docs/changelog.md added.",
          "is_bot": false,
          "headline": "Release 1.0.1: fix MS-OVBA raw-chunk and PROJECT duplicate-entry bugs",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T09:38:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "63c45439690d6dab92367696b3d499a367f13011",
          "body": "…arify feature scope as module-complete",
          "is_bot": false,
          "headline": "docs: fix PROJECTwm location in file tree (VBA storage, not root); cl…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T08:55:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e29cfe80afdffa83759b64845a777a76bfb0541",
          "body": null,
          "is_bot": false,
          "headline": "ci: verify tag matches pyproject.toml version before publish",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T08:44:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c706a6f2bdf16bb83513d3b2b22a30c58e793a41",
          "body": "…nce pyproject.toml with metadata and optional dependencies; add CI and publish workflows",
          "is_bot": false,
          "headline": "Bump version to 1.0.0; update README with CI and license badges; enha…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T08:35:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a65f66616a9a6dedf48a334e0d2ace69c05b6a2",
          "body": "…cture documentation",
          "is_bot": false,
          "headline": "Update README and project files for clarity and accuracy; add archite…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T08:19:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfad358adbb4592c3dbc01fee64bc7d536c35c9a",
          "body": "…ling",
          "is_bot": false,
          "headline": "Add MS-OVBA Implementation Guide v2 for comprehensive VBA module hand…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T08:00:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3db811ae492662b763b30dcb566bfa51336f70c",
          "body": "- Added multiple binary files to the fuzz_corpus for testing purposes, including:\n  - Randomly generated binary data\n  - Signature files with zeros and truncated headers\n  - Compressed data followed by garbage\n  - Empty files and files with specific headers\n  - Various live bitflip scenarios to test resilience against bit manipulation\n  - Project-related binary files with intentional corruption for robustness testing\n  - MBCS (Multi-Byte Character Set) related files to check encoding handling",
          "is_bot": false,
          "headline": "Add fuzz corpus binary files for various test cases",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:54:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e136e0e000b1b8081068ad78710d76668347b568",
          "body": "…ound-trip preservation",
          "is_bot": false,
          "headline": "Add Excel verification set generation script and update roadmap for r…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:48:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "756b243587809d6984872175ff8d131e61d94b47",
          "body": "…s for cache preservation and invalidation behavior",
          "is_bot": false,
          "headline": "Implement _VBA_PROJECT cache invalidation on mutating saves; add test…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:42:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "326ab01e5fe25a68766dce2c1c859fff321e041e",
          "body": "- Introduced new fixtures for live XLSB, protected XLSM, and empty XLSM workbooks.\n- Added tests to ensure proper handling of XLSB files, including round-trip preservation of non-VBA entries and module edits.\n- Implemented tests to verify that password-protected workbooks are correctly identified an\n[…]\nor protected projects.\n- Created a new test corpus to cover required categories, including password-protected and empty VBA projects.\n- Added a sample password-protected workbook for testing purposes.",
          "is_bot": false,
          "headline": "Add tests for XLSB and protected XLSM workbooks",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:35:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "101e50e7f29a59bbe99ef0da5d49e70c19b629cf",
          "body": "…eservation; add fuzz testing for robustness against malformed inputs",
          "is_bot": false,
          "headline": "Implement PROJECTlk serialization and enhance tests for round-trip pr…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:28:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9194466c1290df5ba6f71d83d3196c16c9673141",
          "body": "… protection and signature handling; add tests for PROJECTwm round-trip and save behavior with protected projects",
          "is_bot": false,
          "headline": "Implement PROJECTwm serialization and enhance save functionality with…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:23:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe9ff0965ad4465ba4bc2a2709813c7c6225d0e9",
          "body": "…reservation and synthetic sub-storage",
          "is_bot": false,
          "headline": "Enhance UserForm and sub-storage handling; add tests for round-trip p…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:17:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ec8a4a0226ebb8a6c57592ee9aa1936daef3219",
          "body": "… PROJECT streams; add tests for module round-trip operations",
          "is_bot": false,
          "headline": "Implement add/delete module functionality with persistence in CFB and…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:09:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1d947d8d1a9015a7ae465b4f51c1c18b998a8e9",
          "body": "…ROJECT streams; add tests for rename round-trip",
          "is_bot": false,
          "headline": "Implement module renaming functionality with persistence in CFB and P…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T07:05:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f728a1e9ebe2dbdff636933a464f00dde6404a65",
          "body": "…or stream removal and SRP stream handling",
          "is_bot": false,
          "headline": "Implement CFB stream removal and directory mutation APIs; add tests f…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T06:58:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f4f4a4452e4d4f9d1a3967d61aa8a422754b899",
          "body": "This commit introduces a comprehensive document outlining the feature-completeness gates for MS-OVBA implementations. It details the requirements for each gate, including scope declaration, host package handling, OLE/CFB container management, binary parsing, compression, and various project stream v\n[…]\nidations. The document serves as a guideline for ensuring that implementations meet the necessary standards for feature completeness, providing clear failure conditions and expectations for each gate.",
          "is_bot": false,
          "headline": "Add MS-OVBA Feature-Completeness Gates documentation",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T06:52:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5f36ff676c68213385918b3108e501035ad8d9f",
          "body": "- Introduced a new test file `test_pull_push.py` to validate the disk-based push/pull functionality.\n- Implemented tests to ensure correct behavior when pulling and pushing VBA modules from/to Excel workbooks.\n- Added checks for file extensions, line endings, and directory creation during the pull p\n[…]\nnsuring non-source files are ignored.\n- Added CLI tests for listing module names and performing pull/push operations.\n- Created a sample macro workbook `test_macro_workbook.xlsb` for testing purposes.",
          "is_bot": false,
          "headline": "Add tests for push/pull workflow and include a sample macro workbook",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T06:40:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53909d873b4e5fabb07ccbd3d411664b5d623a15",
          "body": "This commit introduces a comprehensive suite of tests for the pyOpenVBA library, structured around the gates defined in `xlsm_feature_completeness_gates.md`. Each test class corresponds to a specific gate, asserting the expected behavior of the library. The tests cover various aspects, including fil\n[…]\nat the implementation adheres to the specified requirements. Additionally, tests are marked with `pytest.mark.xfail` for features not yet implemented, providing a clear roadmap for future development.",
          "is_bot": false,
          "headline": "Add gate-level conformance tests for pyOpenVBA",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T06:35:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b196171a4f7826b94e90e30894f65b0574b56f6",
          "body": null,
          "is_bot": false,
          "headline": "Add write stream functionality and corresponding tests for CFB",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T06:17:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0995dfe7cdfb45356ae09cc8c86706dc35d67251",
          "body": "…ession\n\n- Implement tests for the CFB parser in `test_cfb.py`, covering minimal CFB structure, error handling, and stream retrieval.\n- Create tests for the ExcelFile class in `test_excel.py`, validating file opening, unsupported formats, and context manager behavior.\n- Add comprehensive tests for t\n[…]\n in `test_vba.py`, ensuring correct handling of various chunk types and compression logic.\n- Introduce a detailed feature-completeness gates document outlining requirements for MS-OVBA implementation.",
          "is_bot": false,
          "headline": "Add unit tests for CFB parser, ExcelFile interface, and MS-OVBA compr…",
          "author_name": "William Smith",
          "author_login": "WilliamSmithEdward",
          "committed_at": "2026-05-22T05:32:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 10,
      "commits_last_year": 63,
      "latest_release_at": "2026-08-02T05:37:12Z",
      "latest_release_tag": "v3.2.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "pyOpenVBA",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "docm",
            "excel",
            "macros",
            "ms-cfb",
            "ms-ovba",
            "office",
            "powerpoint",
            "pptm",
            "vba",
            "word",
            "xlam",
            "xls",
            "xlsb",
            "xlsm",
            "Development Status :: 5 - Production/Stable",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: MIT License",
            "Operating System :: OS Independent",
            "Programming Language :: Python",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3 :: Only",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.14",
            "Topic :: Office/Business",
            "Topic :: Software Development :: Libraries :: Python Modules",
            "Topic :: System :: Archiving",
            "Typing :: Typed"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/pyOpenVBA/",
          "is_deprecated": false,
          "latest_version": "3.2.0",
          "repository_url": "https://github.com/WilliamSmithEdward/pyOpenVBA",
          "versions_count": 10,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 11311,
          "first_published_at": "2026-05-22T08:31:51.082599Z",
          "latest_published_at": "2026-08-02T05:36:58.211044Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 31,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-20",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "demos"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 87064,
      "source_files_sampled": 86,
      "oversized_source_files": 4,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 3,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 2,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "WilliamSmithEdward",
          "commits": 66,
          "avatar_url": "https://avatars.githubusercontent.com/u/116382973?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "publish.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/18 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "0fbcd18b7699cec7b44cf1399c60b44914fd7284",
        "ran_at": "2026-08-02T05:39:36Z",
        "aggregate_score": 3.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-08-02T05:37:14Z",
      "oldest_open_prs": [
        {
          "number": 4,
          "created_at": "2026-07-25T21:26:36Z",
          "last_comment_at": "2026-07-29T15:23:28Z",
          "last_comment_author": "WilliamSmithEdward"
        }
      ],
      "last_merged_pr_at": "2026-08-02T05:36:08Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/WilliamSmithEdward/pyOpenVBA",
    "host": "github.com",
    "name": "pyOpenVBA",
    "owner": "WilliamSmithEdward"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": "The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).",
      "notes": [
        {
          "code": "overall_calibration",
          "params": {
            "raw": 56,
            "calibrated": 59,
            "calibration": "2026-08-02"
          }
        }
      ],
      "value": 59,
      "inputs": {
        "security": 33,
        "vitality": 69,
        "community": 45,
        "governance": 56,
        "calibration": "2026-08-02",
        "engineering": 75,
        "ai_readiness": 34,
        "weighted_overall_raw": 56
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 69,
        "weight": 0.21,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "commits_last_year": 63,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "63 commits in the last year",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 63
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 10,
              "latest_release_tag": "v3.2.0",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "10 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~8 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "exceptional",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "weak",
        "name": "Community & Adoption",
        "value": 45,
        "weight": 0.17,
        "metrics": [
          {
            "key": "popularity",
            "band": "at_risk",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "forks": 1,
              "stars": 31,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "31 stars",
                "points": 24,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 31
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "readme_badges": null,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "readme_badge_services": [],
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "good",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "packages": [
                "pyOpenVBA"
              ],
              "dependents": null,
              "ecosystems": "pypi",
              "total_downloads": null,
              "monthly_downloads": 11311
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "11,311 downloads/month across pypi",
                "points": 54,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 11311,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 56,
        "weight": 0.23,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "newcomer_pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 83,
            "inputs": {
              "merged_prs": 3,
              "open_issues": 0,
              "closed_issues": 2,
              "prs_merged_7d": null,
              "prs_decided_7d": null,
              "prs_merged_30d": null,
              "prs_decided_30d": null,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0,
              "first_time_authors_30d": null,
              "first_time_prs_merged_30d": null,
              "first_time_prs_decided_30d": null
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 42,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 42
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "3/3 decided PRs merged",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 3,
                      "decided": 3
                    }
                  }
                ],
                "max_points": 30
              },
              {
                "key": "newcomer_pr_acceptance",
                "name": "Newcomer PR acceptance",
                "detail": "no first-time contributor's PR decided in 30d",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_newcomer_prs",
                    "params": {
                      "days": 30
                    }
                  }
                ],
                "max_points": 13
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/18 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "weak",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "followers": 12,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "WilliamSmithEdward",
              "public_repos": 52,
              "account_age_days": 1380
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "12 followers of WilliamSmithEdward",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 12,
                      "login": "WilliamSmithEdward"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "52 public repos, account ~3 yr old",
                "points": 20.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 52
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "exceptional",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "pyOpenVBA"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "10 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 75,
        "weight": 0.19,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "topics": [
                "compound-file",
                "deterministic",
                "excel",
                "file-format",
                "office-automation",
                "openxml",
                "pure-python",
                "python",
                "roundtrip",
                "vba",
                "vba-macros",
                "xlam",
                "xls",
                "xlsb",
                "xlsm",
                "zero-dependencies",
                "macro-extraction",
                "ms-cfb",
                "ms-ovba"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "19 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 19
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 33,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 33,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 3.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/18 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "exceptional",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "commit_weight_rule": {
                "min_commits": 50,
                "min_commit_share": 0.1
              },
              "review_only_matches": 0,
              "below_threshold_exposures": [],
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 34,
        "weight": 0.04,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "weak",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.712,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "47 of 66 human commits state their intent (structured subject or explanatory body)",
                "points": 38,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 47,
                      "sampled": 66
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 66",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 66
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 87064,
              "source_files_sampled": 86,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/86 source files over 60KB",
                "points": 52.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 86,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "weak",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "demos"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "demos",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "demos"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
      }
    ],
    "classification": {
      "top": [
        "library"
      ],
      "labels": [
        "library"
      ],
      "scores": {
        "library": 6
      },
      "primary": "library",
      "evidence": [
        {
          "tier": "distribution",
          "label": "library",
          "source": "registry:pypi",
          "weight": 6
        }
      ],
      "artifacts": [],
      "confidence": "medium",
      "host_extension": false,
      "runs_as_process": false,
      "consumed_by_code": true
    },
    "metrics_version": "2.5.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
    "deps.dev does not index pypi:pyOpenVBA@3.2.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-08-02T05:39:46.156115Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/WilliamSmithEdward/pyOpenVBA.svg",
  "full_name": "WilliamSmithEdward/pyOpenVBA",
  "license_state": "standard",
  "license_spdx": "MIT"
}