Extra plots that didn't make the cut for the main page.
This strict view recognizes uv.lock,
Pipfile.lock, poetry.lock,
pdm.lock, pixi.lock, and the paired Rye
lockfiles. It excludes configuration files, generic requirements
files, build backends, and CI commands. Repositories with lockfiles
from multiple managers are reported separately.
The chain starts with repository-root lockfiles and manager-owned configuration. It then adds explicit manager tables from the latest PyPI sdist, but only when the analyzed sdist is the latest release. Build backends never classify a project; they only select unresolved projects for bounded automation inspection.
CI evidence must invoke the tool as an executable with a recognized
project operation, such as poetry install,
pdm sync, hatch run, or
flit build. The parser understands shell wrappers,
python -m, uv run, uvx,
pipx run, subprocess calls, YAML blocks, and local
composite actions. Comments, labels, environment values, version
checks, tool installation, and backend strings do not count.
An unresolved project with root requirements files can be labeled
pip + requirements when automation runs
pip install -r … or installs the current project with
pip install -e .. A single match is medium confidence;
requirements consumed in multiple automation files are high
confidence. Plain pip install ., bootstrapping pip or
another tool, remote editable installs, and uv pip do
not count.
Download the raw 15,000-project CSV. It records both classifications, repository commit, latest PyPI release, confidence, exact evidence, and unresolved conflicts.