goodboy / trio

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

安装 pypi:trio@0.33.0 会引入 5 个包（直接与传递）：其中 0 个存在已知公告，0 个为直接依赖。

没有已知公告影响已评估的依赖。

公告表示依赖图中记录的版本落入某条公告的受影响范围。可达性未经分析，且依赖图包含开发与测试的版本固定——某项发现可能只涉及工具链而非交付的软件。

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 4976,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 3554,
        "Python": 826331
      },
      "pushed_at": "2020-06-21T19:49:35Z",
      "created_at": "2017-11-22T23:23:30Z",
      "owner_type": "User",
      "updated_at": "2017-11-22T23:23:32Z",
      "description": "Trio – Pythonic async I/O for humans and snake people 🐍",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "master",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "goodboy_foss@proton",
      "name": "Bd",
      "type": "User",
      "login": "goodboy",
      "company": "@baudco",
      "location": "everywhere",
      "followers": 167,
      "avatar_url": "https://avatars.githubusercontent.com/u/291685?v=4",
      "created_at": "2010-05-30T22:21:47Z",
      "is_verified": null,
      "public_repos": 41,
      "account_age_days": 5900
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2017-03-11T00:29:44Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "2b8e297e544088b98ff758d37c7ad84f74c3f2f5",
          "body": "Update reference-core.rst",
          "is_bot": false,
          "headline": "Merge pull request #350 from gras100/patch-1",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-11-19T15:40:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1eb69a3ef91db44123f69b69a58dd40b90498651",
          "body": "typo fix with -> def",
          "is_bot": false,
          "headline": "Update reference-core.rst",
          "author_name": "gras100",
          "author_login": "gras100",
          "committed_at": "2017-11-19T15:25:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3edfafeedef4071646a9015e28be01f83dc02f94",
          "body": "Make measure_backlog more robust against weird errors",
          "is_bot": false,
          "headline": "Merge pull request #349 from njsmith/backlog-checking-robustification",
          "author_name": "Nick Malaguti",
          "author_login": "nmalaguti",
          "committed_at": "2017-11-14T01:35:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80357fc288f70fa9c053e928bf81e498ff41b078",
          "body": "@nmalaguti is reporting that on a particular VPS they have access to,\nsometimes, the test_open_tcp_listeners_backlog test is blowing up with\nEMFILE and breaking other tests. Similarly, Travis-CI tests are\ncurrently blowing up, apparently due to this test chewing up all\nephemeral ports. The trigger s\n[…]\n't leave behind open connections and create\nweird failures all over the test suite, and (b) if it looks like we're\nallowing lots and lots of connections, then it stops counting and lets\nthe test pass.",
          "is_bot": false,
          "headline": "Make measure_backlog more robust against syncookies",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-11-13T04:13:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "389f1e1e01b410756e2833cffb992fd1ff856ae5",
          "body": "Report instrument errors via logging",
          "is_bot": false,
          "headline": "Merge pull request #343 from nmalaguti/feature/instrument-errors",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-11-06T19:44:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f368046d60998c2480ef6f41f69467d63259e769",
          "body": "See gh-306",
          "is_bot": false,
          "headline": "Report instrument errors via logging",
          "author_name": "Nick Malaguti",
          "author_login": "nmalaguti",
          "committed_at": "2017-11-06T01:26:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f50aa8e00c29c7f2953b7bad38afc620772dca74",
          "body": "Skip tests that need IPv6 if it is not available",
          "is_bot": false,
          "headline": "Merge pull request #345 from nmalaguti/feature/skip-ipv6",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-11-06T00:51:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aec6451b820154565d91eb85535d3a402fb5e6e5",
          "body": "IPv6 is not available on all travis images. This will skip IPv6 tests\nwhen IPv6 is not available.",
          "is_bot": false,
          "headline": "Skip tests that need IPv6 if it is not available",
          "author_name": "Nick Malaguti",
          "author_login": "nmalaguti",
          "committed_at": "2017-11-05T15:39:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d063d672de15edc231b14c0a9bc3673e5275a9dc",
          "body": "Stop using slots=True in public classes to fix weakref issues",
          "is_bot": false,
          "headline": "Merge pull request #339 from njsmith/no-slots-sigh",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-10-01T03:26:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eae947034acf4252e101fac0915e124452c6c61b",
          "body": "Hopefully we can switch back to using slots=True at some point because\nthe memory savings are nice, but currently it breaks\nweakrefs (gh-331), and currently the supposed workaround breaks on\npypy:\n\n  https://github.com/python-attrs/attrs/issues/174#issuecomment-333335667\n\n(See also gh-337 for an abortive attempt to apply that workaround.)\n\nFixes gh-331",
          "is_bot": false,
          "headline": "Stop using slots=True in public classes to fix weakref issues",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-30T21:39:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3440dbd8caf64ce08ded0847a0f809f3d6324097",
          "body": "Two fixes to unblock our CI",
          "is_bot": false,
          "headline": "Merge pull request #336 from njsmith/fix-ci",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-30T09:25:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bda7d421cefab1a7fb3b297e9e158e3441e3cf1b",
          "body": "This is to work around the cffi bug:\n    https://bitbucket.org/cffi/cffi/issues/335/cffi-macos-wheels-broken-on-360\n\nFixes gh-332",
          "is_bot": false,
          "headline": "[travis] Switch MacOS test from 3.6.0 to 3.6.2",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-30T08:49:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea8fbe84f643ff8cff97af3cb0cfe4ae970eeb24",
          "body": "See gh-334 for details.",
          "is_bot": false,
          "headline": "Pin yapf==0.17.0",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-30T08:48:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d41a6ddfa352cc2002592a64b58f9a7172c9495",
          "body": "[travis] fix stupid typo that was disabling pypy nightly builds",
          "is_bot": false,
          "headline": "Merge pull request #327 from njsmith/fix-travis-pypy-nightly",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-16T04:18:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b7eff51180431621294532fa7acf404e0994cf1",
          "body": "Move introspection APIs into trio.hazmat",
          "is_bot": false,
          "headline": "Merge pull request #325 from njsmith/issue-317",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-16T01:35:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1075239f129e735a540ced313c7fbbdbdb859af5",
          "body": "Renames and deprecations for #68",
          "is_bot": false,
          "headline": "Merge pull request #324 from njsmith/rename-call_soon",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-16T01:35:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ba0c37c7032d918e3f694fff139e57c93a231f6",
          "body": "I really need to stop using bash for things.",
          "is_bot": false,
          "headline": "[travis] fix stupid typo that was disabling pypy nightly builds",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T21:11:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "585ab4e3be0a5ef7a41830edf78eb5a787656b05",
          "body": "Remove is_trio_socket",
          "is_bot": false,
          "headline": "Merge pull request #326 from njsmith/remove-is_trio_socket",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T20:55:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2df899a19850932cea0d4b12dddde323ddd8078",
          "body": null,
          "is_bot": false,
          "headline": "Fix test coverage for deprecated call_soon_queue_size",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T20:54:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d716003791e6b9041babe64ccbfad9e3638d15b9",
          "body": null,
          "is_bot": false,
          "headline": "Update tests for the BlockingTrioPortal transition",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T20:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce8d71f79e3f8cd8bedf6f98b1a3400a656266bc",
          "body": null,
          "is_bot": false,
          "headline": "Update documentation to reflect previous commit",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T20:43:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b36ae5191dc8507ab7aec4c29e35e47c08300e3a",
          "body": "See gh-317",
          "is_bot": false,
          "headline": "Move introspection APIs into trio.hazmat",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T20:43:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a3141d477568e1a29fd923394971a6207117703",
          "body": "As pointed out in:\n\n  https://github.com/python-trio/trio/issues/170#issuecomment-327025129\n\nthere are advantages to having the \"is this a trio socket\" check be\nspelled using 'isinstance'. This commit un-deprecates the\ntrio.socket.SocketType name and makes it an abstract class that\nconcrete socket implementations should inherit from, and then gets rid\nof is_trio_socket since it's now unnecessary.",
          "is_bot": false,
          "headline": "Remove is_trio_socket",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T10:00:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a370218f98213109c8cb49ba8bca44784ca632b",
          "body": null,
          "is_bot": false,
          "headline": "Document BlockingTrioPortal",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T09:16:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bed1d0083050dcea03a90012ac80197abd48c44",
          "body": null,
          "is_bot": false,
          "headline": "Add BlockingTrioPortal; deprecate {run,await}_in_trio_thread",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T02:39:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68c3bb7dd8e612a14b77ba837ec1180ba03a4cfd",
          "body": "This lets us use things like:\n\n  @deprecated(..., instead=BlockingTrioPortal.run)\n  def current_await_in_trio_thread():\n      ...\n\nand the message about BlockingTrioPortal.run now shows up correctly.",
          "is_bot": false,
          "headline": "When fixing up __module__ metadata, recurse into class objects",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T02:32:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aaf5f7271bd1f39506bf52bd06d2f637292e8323",
          "body": null,
          "is_bot": false,
          "headline": "Add test for TrioToken identity properties",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T02:17:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96a115b33ef884f152c5cc3b7c353b300081c7c8",
          "body": null,
          "is_bot": false,
          "headline": "Update tests to use TrioToken",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T02:17:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f620db12df32b3ce3045186aad9c64770d8bed9e",
          "body": null,
          "is_bot": false,
          "headline": "Documentation for TrioToken and current_trio_token",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-15T02:17:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7bc19c33b4aa9293c68a0fd7634b97a00e03911e",
          "body": "...and deprecate current_call_soon_thread_and_signal_safe.\n\nStill need to update callers and docs, but tests are passing (with\ntons of deprecation warnings).",
          "is_bot": false,
          "headline": "Add TrioToken & refactor entry queue logic into a separate file",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-14T07:36:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6107b2570c086694db5e21f1dfe0f580c7758b27",
          "body": "Deprecate Queue.join and Queue.task_done",
          "is_bot": false,
          "headline": "Merge pull request #322 from njsmith/issue-321",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-10T03:36:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "739c332873449741e994ef2a65daa6c07eb7ae19",
          "body": "Make our exports more visible to static analysis",
          "is_bot": false,
          "headline": "Merge pull request #316 from njsmith/issue-314",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-09T23:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffdb562d1ae45e55a28fc3bd1d471647ddfb2ec2",
          "body": null,
          "is_bot": false,
          "headline": "Yet another stupid hack to hopefully fool pycharm",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-09T07:14:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2de8e355e71faceb8091774a1d741debf282947f",
          "body": "See gh-321.",
          "is_bot": false,
          "headline": "Deprecate Queue.join and Queue.task_done",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-09T05:18:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9fd543cd9e5d152c4f638843930f2121b61aec0",
          "body": null,
          "is_bot": false,
          "headline": "Better message for deprecations with no replacement",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-09T05:17:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d755a6aed6568b3dcd997890d04abc4d4817a102",
          "body": null,
          "is_bot": false,
          "headline": "Add note to history.rst",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-09T03:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e9f5082353ea25c0e96ff0c12617a550a6534a8",
          "body": "Apparently PyCharm gives up on parsing __all__ entirely if it sees\n__all__ += foo.__all__, so move the static trio.__all__ entries that\nwe want to be visible to static analyzers into their own dedicated\nsubmodule.\n\nSee: https://github.com/python-trio/trio/issues/314#issuecomment-327824200",
          "is_bot": false,
          "headline": "Move toplevel _core exports into a dedicated module",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-09T03:45:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8692bfcf8b0666f8de7b97f4a71c71ad5001e3e2",
          "body": "…ithDeprecations\n\nAvoid infinite recursion in ModuleWithDeprecations.__getattr__",
          "is_bot": false,
          "headline": "Merge pull request #318 from njsmith/no-infinite-recursion-in-ModuleW…",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-07T05:26:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf91d7d3c2e22810ce49438e44273e927b343e57",
          "body": "Add example output to notes-to-self/print-task-tree.py",
          "is_bot": false,
          "headline": "Merge pull request #319 from njsmith/print-task-tree-demo",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-07T05:26:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dda2c6a45a6c4e8bc2d6c4ca2ef82f1728b2b3e",
          "body": "Just for @cjerdonek :-)",
          "is_bot": false,
          "headline": "Add example output to notes-to-self/print-task-tree.py",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-06T08:47:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2091b28a090e7977ce0923f64fc9cdb8c3c79d76",
          "body": null,
          "is_bot": false,
          "headline": "Handle re-exporting of platform-specific hazmat functions",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-06T04:50:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc7ff17b541e40d89eaf767ede81e7032ba321b4",
          "body": "In particular, this should make it so PyCharm's completion starts\nworking.\n\nFixes gh-314.",
          "is_bot": false,
          "headline": "Make our exports more visible to static analysis",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-06T04:50:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "054a701a3e2b09b41ec5a47984e670ae3b8f5679",
          "body": "This isn't really needed currently (we'd know, the symptom is a\nRecursionError at import time), but it's a genuine bug fix for a\nproblem I ran into while implementing gh-316. And since that PR seems\nto be stalled at the moment, I want to get this in so it doesn't get\nforgotten.",
          "is_bot": false,
          "headline": "Avoid infinite recursion in ModuleWithDeprecations.__getattr__",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-06T04:48:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "733be7507b10ff6a9abf914fccca552c13af0366",
          "body": "Add notes on how to print task tree for debugging",
          "is_bot": false,
          "headline": "Merge pull request #313 from njsmith/print-task-tree",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-05T05:33:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e13129f8d3549d9599186a69282c1af661962d32",
          "body": "Rename some internal classes that were missed in gh-311",
          "is_bot": false,
          "headline": "Merge pull request #312 from njsmith/311-followup",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:49:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "711afba2551a75c8f621b264914109a48a7efa56",
          "body": null,
          "is_bot": false,
          "headline": "Add notes on how to print task tree for debugging",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:35:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc5c183fce1cb4f323bfabd0f6523c016ae9f2fa",
          "body": null,
          "is_bot": false,
          "headline": "Rename some internal classes that were missed in gh-311",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:34:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6db2eb16b1c3a8e02080f9fc4fa50a414f55f38c",
          "body": "Rename things for consistency with the new \"checkpoint\" terminology",
          "is_bot": false,
          "headline": "Merge pull request #311 from njsmith/checkpoint-renames-and-deprecations",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:31:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68a14ef3ce33ebee9b4d80327672e4d8e7cd366d",
          "body": null,
          "is_bot": false,
          "headline": "Small doc tweaks",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:07:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68a1898e5647c291722aa08c9e281937cbc8eb61",
          "body": null,
          "is_bot": false,
          "headline": "yield_indefinitely -> wait_task_rescheduled",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:04:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c3109d5833ef53bacd0f197a4d3b5190391c878",
          "body": null,
          "is_bot": false,
          "headline": "Improve docs for the half-checkpoint functions",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T09:00:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca09dc34b2288b89e496142c18fc1518a509dbc4",
          "body": null,
          "is_bot": false,
          "headline": "run yapf",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T08:48:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cdf33dbc5acfe91312cceedd034ad30bbd25d404",
          "body": null,
          "is_bot": false,
          "headline": "yield_if_cancelled -> checkpoint_if_cancelled",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T08:48:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ecc40ba00a426e7fc1a167e1417ec9c1f49d7c95",
          "body": null,
          "is_bot": false,
          "headline": "yield_briefly_no_cancel -> cancel_shielded_checkpoint",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-09-04T08:45:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae7cc2d4220e97137e4ce8d714418734d33aaad7",
          "body": null,
          "is_bot": false,
          "headline": "Rename assert_yields -> assert_checkpoints; deprecate assert_no_yields",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T18:38:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb5d8ec9131bed5dda7d3465c6505ceb95e9aadb",
          "body": null,
          "is_bot": false,
          "headline": "Rename yield_briefly -> checkpoint",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T18:26:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3613ca6df7341736d04bba1f18db6c12d7fc9075",
          "body": "Deprecations for #136 and #284",
          "is_bot": false,
          "headline": "Merge pull request #309 from njsmith/deprecations-for-136",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T05:23:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b290a969f590676355ec2c0cd3798c5b179fb52e",
          "body": null,
          "is_bot": false,
          "headline": "Move UnboundedQueue into hazmat",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T02:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ff43c0df2babfc36e7e9babdf2b53c27abe12b5",
          "body": null,
          "is_bot": false,
          "headline": "Move Result classes into hazmat",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T02:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e968ee9c36f0cd0a9cebf69d5d33294889b76318",
          "body": null,
          "is_bot": false,
          "headline": "Restore trio.socket.SocketType with deprecation for 0.2.0",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T02:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c326e8274e42b7ded480b9546f1162fe31649b12",
          "body": "Silly oversight missed in gh-253",
          "is_bot": false,
          "headline": "Don't put _SocketType in trio.socket.__all__",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T02:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "497a269716ab3232b20925dec4afc1d0d365e36d",
          "body": null,
          "is_bot": false,
          "headline": "Add support for module attribute deprecations",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-31T02:30:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f05b66c43f3d60317dbd8da6a2acd769569b9e5",
          "body": null,
          "is_bot": false,
          "headline": "Move Task and current_task to trio.hazmat",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-30T07:16:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a07218ecaccd25e7be5f424e28e092dd2d113bbf",
          "body": null,
          "is_bot": false,
          "headline": "Rewrite the intro-to-hazmat section",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T08:02:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa87a65cf1e0f8897f5656a64c6735b062ac676a",
          "body": null,
          "is_bot": false,
          "headline": "Test the now-deprecated nursery.childen attribute",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T08:01:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a546ea7f5a6be61382af805810060426e49ce2b",
          "body": "- un-document deprecated Task members\n- update custom supervisor documentation to avoid deprecated APIs",
          "is_bot": false,
          "headline": "More documentation updates",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T08:01:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1bfd610740dabb31cb1d43920d304032f4cad28",
          "body": "New API:\n\n- nursery.child_tasks\n- nursery.parent_task\n- task.child_nurseries\n- task.parent_nursery (may be None)\n\nRationale: https://github.com/python-trio/trio/issues/136#issuecomment-324192458",
          "is_bot": false,
          "headline": "Deprecate and replace nursery.children and task.parent_task",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T01:23:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1572dabc7e47fdf16dd58f6798fa3934cdfa403",
          "body": null,
          "is_bot": false,
          "headline": "Undocument deprecated nursery attributes",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T01:22:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a87ea85d4c5ddaff013443617f1d8f95195df02b",
          "body": null,
          "is_bot": false,
          "headline": "Add a little test to cover some deprecated wrappers",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T00:48:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b5fc244e1b18a23cca76a9bdb786d2c964996a2",
          "body": null,
          "is_bot": false,
          "headline": "Fix a naming collision that caused a test to be skipped",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-23T00:00:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "643fdaa2382e0376e0b7303c1f91cb6534188744",
          "body": null,
          "is_bot": false,
          "headline": "run yapf",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T09:39:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1f0b5a9edec53ab1da92446735b574be51c2e1f",
          "body": null,
          "is_bot": false,
          "headline": "0 warnings!",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T09:03:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f543ffe09872d136cc556553af436870f01143a4",
          "body": null,
          "is_bot": false,
          "headline": "60 warnings left",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:45:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15ed29146c181ea6ad56940cb94fe481f91e371b",
          "body": null,
          "is_bot": false,
          "headline": "fix some docs and comments",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:39:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0aa14ab73eb26456cd0bcd0ca240acc48d8278e8",
          "body": null,
          "is_bot": false,
          "headline": "133 warnings",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:37:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22541afdf6556b48c2d5dbca3dd8c24205435a43",
          "body": null,
          "is_bot": false,
          "headline": "run yapf",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:32:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f62c687139a089cc5608efbcc747eafeb14157b2",
          "body": "spawn's deprecation is really part of 284, not 136, though I'm\nhandling them both together because they're closely related.",
          "is_bot": false,
          "headline": "Fix issue number",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:31:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d2e2603b972dc0adeaa3ded35cd6590527b5e66",
          "body": null,
          "is_bot": false,
          "headline": "155 warnings left",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:30:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14f96d0bef15eca16c2097e191eb738b00886b49",
          "body": null,
          "is_bot": false,
          "headline": "Down to 538 warnings...",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:26:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b115a8148dd7aee3bea0d8e63412c513bc59cf6e",
          "body": "For gh-136\n\nThis commit contains:\n\n- the actual deprecations\n- changes to _run.py to prevent warnings\n- changes to test_run.py to prevent warnings\n\nStill need to clean up everything else.",
          "is_bot": false,
          "headline": "Deprecate most of the nursery and task APIs",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:04:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "058c985fb0b68a26f1280910cb89f0f101257922",
          "body": "Deprecations for #257, plus general deprecation improvements",
          "is_bot": false,
          "headline": "Merge pull request #308 from njsmith/moar-deprecations",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T08:04:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ea17a5e0518063029b77e00977215657294137c",
          "body": "For gh-257",
          "is_bot": false,
          "headline": "Add {add,remove}_instrument, deprecate current_instruments",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T07:53:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afa986857380b52b42414595872effe9b3258db8",
          "body": null,
          "is_bot": false,
          "headline": "@deprecated now adds deprecation warnings to docstrings",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T07:36:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fbadf761dd2bcc8bb77736d21a1941743c6c4d3",
          "body": null,
          "is_bot": false,
          "headline": "Add issue metadata to deprecations, and reduce verbosity",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T06:06:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dce4f654752743a19b02bd8aef58ab33bc3e7eec",
          "body": "Add high-level server helpers",
          "is_bot": false,
          "headline": "Merge pull request #307 from njsmith/serve",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T05:12:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed0996730f71cfa280c3e8491633c7170e2490b7",
          "body": null,
          "is_bot": false,
          "headline": "Add documentation for trio.serve_*",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T04:59:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5782f8f2aaed457cc95dcfdd683f33b1dccbc105",
          "body": null,
          "is_bot": false,
          "headline": "Add trio.serve_ssl_over_tcp",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T03:06:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bdaac285a539a3227df98ae87e4071a23eb99ad",
          "body": null,
          "is_bot": false,
          "headline": "Add trio.serve_tcp",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T03:06:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73f07870968707881861f127b636f31952f75584",
          "body": null,
          "is_bot": false,
          "headline": "Fix filename",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T02:55:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "090a1d670fcbad82ff5a722b2a3a1df148926cea",
          "body": "For brevity and consistency",
          "is_bot": false,
          "headline": "Rename connection_nursery to handler_nursery",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T02:54:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cdde5c2963c78ed4a62c3d50ac0e3620824d97c",
          "body": null,
          "is_bot": false,
          "headline": "Update README",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T02:53:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cdabe4c6c8f9bb1cefd2fab79e09b27eff734e31",
          "body": "I guess we can add it back if anyone ever notices and complains, it's\nalmost certainly never going to be used, and it makes the code too\ncomplicated. It's likely folks will be looking at this as example\ncode, so let's not inflict this on them for no reason.",
          "is_bot": false,
          "headline": "Remove MultiError handling from serve_listeners",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T02:45:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e4ccf060121fed898d7b041c220784028e27404",
          "body": null,
          "is_bot": false,
          "headline": "Add serve_listeners",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T02:33:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52c2349bb8bda615407cbcdd3a2ed0aee44186f0",
          "body": "[docs] Fix typo",
          "is_bot": false,
          "headline": "Merge pull request #302 from njsmith/typo",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-22T00:33:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "907964da3901a8ee3ebf61ff2222194c1d8a445f",
          "body": "Thanks to @matham for catching it:\n  https://github.com/python-trio/trio/pull/298#issuecomment-323878939",
          "is_bot": false,
          "headline": "[docs] Fix typo",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-21T23:41:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e90f850dc329c6f8e19c0aa0902a7c909d924a45",
          "body": "Run yapf",
          "is_bot": false,
          "headline": "Merge pull request #301 from njsmith/yapf-fix",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-21T22:28:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71364971b653b4f27ac04cd1f13952d1fe9aa130",
          "body": "Fixes a formatting problem that snuck in with gh-287, whose CI ran\nbefore we added the formatting checks, but then was merged after.",
          "is_bot": false,
          "headline": "Run yapf",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-21T21:38:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8adfa4d252d6cea693a3b542a847c35baa14ad82",
          "body": "Faster ParkingLot",
          "is_bot": false,
          "headline": "Merge pull request #287 from njsmith/faster-parkinglot-queue-queue",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-21T20:14:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90c54e9d39b1685f951cfd39d8974a67696959fa",
          "body": "Add nursery.start and nursery.start_soon",
          "is_bot": false,
          "headline": "Merge pull request #298 from njsmith/start-task",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-21T19:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fd064b8c88e39181840165d62e1375f90a05710",
          "body": "The new 0.17 release has slightly different ideas about formatting.",
          "is_bot": false,
          "headline": "Run yapf",
          "author_name": "Nathaniel J. Smith",
          "author_login": "njsmith",
          "committed_at": "2017-08-21T06:28:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 0,
      "latest_release_at": "2017-03-11T00:29:44Z",
      "latest_release_tag": "v0.1.0",
      "releases_from_tags": true,
      "days_since_last_push": 2225,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 3423,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "trio",
          "exists": true,
          "license": "MIT OR Apache-2.0",
          "keywords": [
            "async",
            "io",
            "networking",
            "trio",
            "Development Status :: 4 - Beta",
            "Framework :: Trio",
            "Intended Audience :: Developers",
            "Operating System :: MacOS :: MacOS X",
            "Operating System :: Microsoft :: Windows",
            "Operating System :: POSIX :: BSD",
            "Operating System :: POSIX :: Linux",
            "Programming Language :: Python :: 3 :: Only",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.14",
            "Programming Language :: Python :: Implementation :: CPython",
            "Programming Language :: Python :: Implementation :: PyPy",
            "Topic :: System :: Networking",
            "Typing :: Typed"
          ],
          "ecosystem": "pypi",
          "matches_repo": false,
          "registry_url": "https://pypi.org/project/trio/",
          "is_deprecated": false,
          "latest_version": "0.33.0",
          "repository_url": "https://github.com/python-trio/trio",
          "versions_count": 43,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2017-01-14T00:27:42.056802Z",
          "latest_published_at": "2026-02-14T18:40:55.386057Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 161
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 1,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "docs/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 62981,
      "source_files_sampled": 123,
      "oversized_source_files": 2,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml",
        "setup.py"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 5,
        "malicious_count": 0,
        "assessed_package": "pypi:trio@0.33.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "njsmith",
          "commits": 833,
          "avatar_url": "https://avatars.githubusercontent.com/u/609896?v=4"
        },
        {
          "type": "User",
          "login": "buhman",
          "commits": 63,
          "avatar_url": "https://avatars.githubusercontent.com/u/728108?v=4"
        },
        {
          "type": "User",
          "login": "brettcannon",
          "commits": 18,
          "avatar_url": "https://avatars.githubusercontent.com/u/54418?v=4"
        },
        {
          "type": "User",
          "login": "kyrias",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/2285387?v=4"
        },
        {
          "type": "User",
          "login": "Carreau",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/335567?v=4"
        },
        {
          "type": "User",
          "login": "nmalaguti",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/33187?v=4"
        },
        {
          "type": "User",
          "login": "TheBashar",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/6647529?v=4"
        },
        {
          "type": "User",
          "login": "remleduff",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/210362?v=4"
        },
        {
          "type": "User",
          "login": "dhermes",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/520669?v=4"
        },
        {
          "type": "User",
          "login": "idlesign",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/145644?v=4"
        }
      ],
      "contributors_sampled": 13,
      "top_contributor_share": 0.892
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 14 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "2b8e297e544088b98ff758d37c7ad84f74c3f2f5",
        "ran_at": "2026-07-26T00:27:54Z",
        "aggregate_score": 2.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/goodboy/trio",
    "host": "github.com",
    "name": "trio",
    "owner": "goodboy"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
      "notes": [
        {
          "code": "jurisdiction_overall_adjustment",
          "params": {
            "cap": 49,
            "pct": 50
          }
        }
      ],
      "value": 12,
      "inputs": {
        "security": 31,
        "vitality": 13,
        "community": 9,
        "governance": 33,
        "engineering": 32,
        "high_risk_jurisdiction_cap": 49,
        "high_risk_jurisdiction_multiplier": 50,
        "weighted_overall_before_jurisdiction": 24,
        "overall_after_jurisdiction_multiplier": 12
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 13,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 1,
              "days_since_last_push": 2225,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2225 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2225
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 32,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.1.0",
              "releases_from_tags": true,
              "days_since_latest_release": 3423,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3423 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3423
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "dormant",
              "guards": [
                "no_open_demand",
                "dependencies_clean"
              ],
              "signals": [
                "scorecard_unmaintained"
              ],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 3170,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 3170 days, with nothing left unanswered; held at dormant by nothing open to answer, no affected dependency",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_quiet",
                    "params": {
                      "days": 3170
                    }
                  },
                  {
                    "code": "abandonment_guarded",
                    "params": {
                      "guards": "nothing open to answer, no affected dependency"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 9,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 33,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 13,
              "top_contributor_share": 0.892
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 89% of commits",
                "points": 2.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 89
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "13 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 14 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "followers": 167,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "goodboy",
              "public_repos": 41,
              "account_age_days": 5900
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "167 followers of goodboy",
                "points": 16,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 167,
                      "login": "goodboy"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "41 public repos, account ~16 yr old",
                "points": 23.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 41
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 16
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 32,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 31,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Signed-Releases, Token-Permissions. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "dangerous_workflow",
                    "packaging",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "jurisdiction_posture_adjustment",
                "params": {
                  "cap": 49,
                  "pct": 50
                }
              }
            ],
            "value": 14,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 13,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 5,
              "scorecard_aggregate": 2.7,
              "high_risk_jurisdiction_cap": 49,
              "high_risk_jurisdiction_multiplier": 50,
              "security_posture_after_multiplier": 14,
              "security_posture_before_jurisdiction": 27
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 14 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:trio@0.33.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "pypi:trio@0.33.0",
                  "assessed": 5
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 5,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 5,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "moderate",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 50,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": true,
              "exposures": [
                {
                  "role": "top_contributor",
                  "count": 1,
                  "country": "Russia"
                }
              ],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 19
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "Russia: top_contributor (1)",
                "points": 50,
                "status": "partial",
                "details": [
                  {
                    "code": "jurisdiction_exposure",
                    "params": {
                      "role": "top_contributor",
                      "count": 1,
                      "country": "Russia"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 36,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.41,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "41 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 21.9,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 41,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [
                "docs/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "docs/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "docs/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 62981,
              "source_files_sampled": 123,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/123 source files over 60KB",
                "points": 54.1,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 123,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "pypi package 'trio' points at a different repository (https://github.com/python-trio/trio); excluded from ecosystem scoring",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T00:28:03.700956Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/goodboy/trio.svg",
  "full_name": "goodboy/trio",
  "license_state": "custom",
  "license_spdx": null
}