Tools to diagnose tools

[thorwhalen]

The purpose of this discussion is to gather information about websites, APIs, and python packages that can help us analyze python code/packages.

Our primary interest is to analyze our own so we have some information on what our weaknesses are, where we should improve, etc. But obviously, we can also use the same tools to analyze third-party packages that we may want to depend on. Finally, we'd like the broader community to both participate and benefit from this conversation.

[thorwhalen]

Libraries.io

Libraries.io is a service that tracks open-source software and provides data on package health, usage, and licensing.

Example of browser usage:

• Get info about dol: https://libraries.io/pypi/dol
• Packages depending on dol: https://libraries.io/pypi/dol/dependents
• There's a sourceRank, explained, for dol, in detail, here: https://libraries.io/pypi/dol/sourcerank

Apparently there's a problem with the dependency count.
See, for example, https://libraries.io/pypi/audiostream2py.`audiostream2py` has dependencies, but shows 0 there!

There is an API you can call to get health scores for PyPI published packages.

Libraries.io has an API. See API docs.

To use the Libraries.io API, you will need to sign up for a free API key. Once you have your API key, you can make a request to the following endpoint to get the health score for a specific PyPI package:

https://libraries.io/api/pypi/<package_name>?api_key=<your_api_key>

Replace <package_name> with the name of the PyPI package you want to check, and <your_api_key>with your Libraries.io API key.

The API will return a JSON object with information about the package, including the health score. The health score is a value between 0 and 1 that represents the overall health of the package based on factors like open issues, recent activity, and number of contributors.

[thorwhalen]

SNYK

Has a few categorical overview metrics, but I like that it has some historical metrics as well.

Example: https://snyk.io/advisor/python/dol

I haven't found an API for it.