MaintainerPulse
temporal prediction of dependency maintenance riskpycryptodome Legrandin/pycryptodome ▲ high risk
84%
no release in the next 12 months
50%
new issues will go unanswered (30 days)
100%
maintainer activity collapse within 12 months
13%
chance of a release within 12 months (survival model)
Model risk over time
calibrated P(no release next 12mo) at each historical monthly snapshot
Repository activity, last 36 months
pushes
issues
PyPI release
What drives this score
TreeSHAP contributions; raises risk /
lowers risk
Survival curve
P(still no release) m months ahead, discrete-time hazard model
What if? — poke the model
drag a signal and the deployed models rescore this package live (implied signals move together — two years without a release also zeroes "releases, last 12mo"). The needle tracks the activity-collapse model, a logistic regression: monotone by construction, so it responds smoothly to counterfactuals where the tree models step.
maintainer activity collapse, 12mo
In plain words
- no PyPI release in 15 months
- no pushes to the repository in 6 months
- bus factor: one person makes 100% of pushes
Maintained alternatives
similar packages with low predicted risk; ranked by summary similarity
blended with shared-dependents overlap, validated against known migrations
| package | what it is | similarity | shared dependents | its 12mo risk |
|---|---|---|---|---|
| cryptography | cryptography is a package which provides cryptographic recipes and primitives to Python de | 0.73 | 7 | 0% |
| pynacl | Python binding to the Networking and Cryptography (NaCl) library | 0.69 | 2 | 36% |
| ecdsa | ECDSA cryptographic signature library (pure python) | 0.66 | 4 | 13% |
| ledgered | Python tools, utils, libraries, to be used with Ledger cryptodevices | 0.59 | 0 | 6% |
| pyopenssl | Python wrapper module around the OpenSSL library | 0.58 | 0 | 6% |
Signals at the latest snapshot
| days since last release | 472 | releases, last 12mo | 0 |
| people pushing, last 12mo | 1 | bus factor (top pusher share) | 100% |
| issues opened, last 12mo | 1 | 30-day response rate | 0% |
| stars accumulated | 3170 | open vulns without fix | 0 |
Probabilities are isotonic-calibrated on a held-out validation year and evaluated on future snapshots the models never saw (PR-AUC 0.894, precision@50 = 1.00 on the headline target).