Python Open-Source Supply-Chain Review
Python repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: Python. 1259 successful scans; 1259 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| Python | 1259 | 1259 | 13.31 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| browser-act/skills | 100.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 33,996 | 2026-10-31 |
| white0dew/XiaohongshuSkills | 94.53 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 8,455 | 2026-10-31 |
| openai/openai-python | 94.13 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 412,217 | 2026-10-31 |
| google/clusterfuzz | 88.49 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 259,303 | 2026-10-31 |
| nesquena/hermes-webui | 87.53 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 828,894 | 2026-10-31 |
| Z4nzu/hackingtool | 83.75 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 20,283 | 2026-10-31 |
| mandiant/capa | 80.55 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 68,586 | 2026-10-31 |
| megadose/holehe | 77.53 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 9,278 | 2026-10-31 |
| keon/algorithms | 71.96 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 36,536 | 2026-10-31 |
| VectifyAI/PageIndex | 71.69 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 57,570 | 2026-10-31 |
| tonquer/picacg-qt | 70.54 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 70,743 | 2026-10-31 |
| saulpw/visidata | 67.84 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 61,821 | 2026-10-31 |
| healthchecks/healthchecks | 67.48 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 84,328 | 2026-10-31 |
| freqtrade/freqtrade-strategies | 63.82 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 10,427 | 2026-10-31 |
| joeseesun/qiaomu-anything-to-notebooklm | 62.82 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 4,624 | 2026-10-31 |
| microsoft/agent-framework | 60.87 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,229,397 | 2026-10-31 |
| robusta-dev/krr | 60.39 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 10,690 | 2026-10-31 |
| andreafrancia/trash-cli | 59.09 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 20,305 | 2026-10-31 |
| pex-tool/pex | 57.25 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 171,636 | 2026-10-31 |
| home-assistant/operating-system | 55.39 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 12,197 | 2026-10-31 |
| LmeSzinc/AzurLaneAutoScript | 53.18 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 309,540 | 2026-10-31 |
| jacobgil/pytorch-grad-cam | 52.92 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 5,177 | 2026-10-31 |
| browser-use/web-ui | 52.60 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 5,894 | 2026-10-31 |
| ranaroussi/yfinance | 52.35 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 19,811 | 2026-10-31 |
| zhiyiYo/PyQt-Fluent-Widgets | 51.71 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 50,518 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.