{"id":13399901,"url":"https://github.com/python/cpython","last_synced_at":"2026-07-11T02:27:34.531Z","repository":{"id":37239454,"uuid":"81598961","full_name":"python/cpython","owner":"python","description":"The Python programming language","archived":false,"fork":false,"pushed_at":"2026-07-04T05:01:52.000Z","size":842821,"stargazers_count":73498,"open_issues_count":9407,"forks_count":34816,"subscribers_count":1571,"default_branch":"main","last_synced_at":"2026-07-04T06:04:58.687Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://www.python.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/python.png","metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":".github/CONTRIBUTING.rst","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null},"funding":{"custom":"https://www.python.org/psf/donations/python-dev/","github":["python"]}},"created_at":"2017-02-10T19:23:51.000Z","updated_at":"2026-07-04T04:09:19.000Z","dependencies_parsed_at":"2023-12-18T18:44:05.891Z","dependency_job_id":"daca1c05-6154-4891-9dd0-0397bc5ccac2","html_url":"https://github.com/python/cpython","commit_stats":{"total_commits":111581,"total_committers":3071,"mean_commits":36.3337675024422,"dds":0.9002249486919816,"last_synced_commit":"9944ad388c457325456152257b977410c4ec3593"},"previous_names":[],"tags_count":660,"template":false,"template_full_name":null,"purl":"pkg:github/python/cpython","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/python%2Fcpython","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/python%2Fcpython/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/python%2Fcpython/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/python%2Fcpython/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/python","download_url":"https://codeload.github.com/python/cpython/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/python%2Fcpython/sbom","scorecard":{"id":24495,"data":{"date":"2025-08-04","repo":{"name":"github.com/python/cpython","commit":"af15e1d13ea26575afbb94b814e541586547a706"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":6.3,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":8,"reason":"Found 25/30 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Security-Policy","score":9,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/require-pr-label.yml:13","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/require-pr-label.yml:30","Warn: no topLevel permission defined: .github/workflows/add-issue-header.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/build.yml:15","Warn: no topLevel permission defined: .github/workflows/documentation-links.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/jit.yml:26","Info: topLevel 'contents' permission set to 'read': .github/workflows/lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/mypy.yml:31","Info: topLevel 'issues' permission set to 'read': .github/workflows/new-bugs-announce-notifier.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/project-updater.yml:10","Warn: no topLevel permission defined: .github/workflows/require-pr-label.yml:1","Warn: no topLevel permission defined: .github/workflows/reusable-context.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/reusable-docs.yml:8","Warn: no topLevel permission defined: .github/workflows/reusable-macos.yml:1","Warn: no topLevel permission defined: .github/workflows/reusable-san.yml:1","Warn: no topLevel permission defined: .github/workflows/reusable-ubuntu.yml:1","Warn: no topLevel permission defined: .github/workflows/reusable-wasi.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/reusable-windows-msi.yml:12","Warn: no topLevel permission defined: .github/workflows/reusable-windows.yml:1","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/tail-call.yml:20","Info: topLevel 'contents' permission set to 'read': .github/workflows/verify-ensurepip-wheels.yml:17","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Branch-Protection","score":3,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Warn: branch 'main' does not require approvers","Warn: codeowners review is not required on branch 'main'","Info: status check found to merge onto on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}},{"name":"Binary-Artifacts","score":6,"reason":"binaries present in source code","details":["Warn: binary detected: Lib/ensurepip/_bundled/pip-25.2-py3-none-any.whl:1","Warn: binary detected: Lib/test/test_importlib/metadata/data/example-21.12-py3-none-any.whl:1","Warn: binary detected: Lib/test/test_importlib/metadata/data/example2-1.0.0-py3-none-any.whl:1","Warn: binary detected: Lib/test/wheeldata/setuptools-79.0.1-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/_xxtestfuzz.c:5","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/_xxtestfuzz.c:13","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:3","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:8","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:11","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:89","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:152","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:198","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:286","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:341","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:398","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:444","Info: CLibFuzzer integration found: Modules/_xxtestfuzz/fuzzer.c:617"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Info: Possibly incomplete results: error parsing shell code: invalid UTF-8 encoding: Lib/test/archivetestdata/exe_with_z64:0","Info: Possibly incomplete results: error parsing shell code: invalid UTF-8 encoding: Lib/test/archivetestdata/exe_with_zip:0","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-issue-header.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/add-issue-header.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:620: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:626: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:342: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:348: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:363: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:379: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:669: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:674: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:682: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:688: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:539: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:545: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:554: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:564: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:575: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:287: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:302: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:418: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:432: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build.yml:443: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:457: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:491: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:518: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/build.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/documentation-links.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/documentation-links.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jit.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/jit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jit.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/jit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jit.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/jit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/lint.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/lint.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/mypy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mypy.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/mypy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/new-bugs-announce-notifier.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/new-bugs-announce-notifier.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/new-bugs-announce-notifier.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/new-bugs-announce-notifier.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/project-updater.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/project-updater.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-pr-label.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/require-pr-label.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-pr-label.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/require-pr-label.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-pr-label.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/require-pr-label.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/require-pr-label.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/require-pr-label.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-context.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-context.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-context.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-context.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-docs.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-docs.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-docs.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-docs.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-docs.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-docs.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-docs.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-macos.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-macos.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-macos.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-san.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-san.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-san.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-san.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/reusable-san.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-san.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-san.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-san.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-ubuntu.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-ubuntu.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-ubuntu.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/reusable-ubuntu.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-ubuntu.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-ubuntu.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-wasi.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-wasi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-windows-msi.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-windows-msi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/reusable-windows.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/reusable-windows.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/stale.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tail-call.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/tail-call.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tail-call.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/tail-call.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-ensurepip-wheels.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/verify-ensurepip-wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-ensurepip-wheels.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/python/cpython/verify-ensurepip-wheels.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/mypy.yml:70","Warn: npmCommand not pinned by hash: .github/workflows/new-bugs-announce-notifier.yml:20","Warn: pipCommand not pinned by hash: .github/workflows/reusable-docs.yml:123","Warn: downloadThenRun not pinned by hash: .github/workflows/reusable-san.yml:50","Warn: downloadThenRun not pinned by hash: .github/workflows/reusable-san.yml:58","Info:   0 out of  61 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of  19 third-party GitHubAction dependencies pinned","Info:   1 out of   2 npmCommand dependencies pinned","Info:   0 out of   2 pipCommand dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}}]},"last_synced_at":"2025-08-14T17:33:58.690Z","repository_id":37239454,"created_at":"2025-08-14T17:33:58.690Z","updated_at":"2025-08-14T17:33:58.690Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35189713,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-06T02:00:07.184Z","response_time":106,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-30T19:00:44.832Z","updated_at":"2026-07-11T02:27:34.525Z","avatar_url":"https://github.com/python.png","language":"Python","funding_links":["https://www.python.org/psf/donations/python-dev/","https://github.com/sponsors/python"],"categories":["Python","Projects with already integrated PGO into their build scripts","Mainstream implementations","Implementations","HarmonyOS","others","Python internals","高性能","Containers \u0026 Language Extentions \u0026 Linting","实现","Programming Languages :sunglasses:","playground list","Python 程序","Repos","Back-End Development","Python Implementations","Implementations [🔝](#readme)","Multi paradigm","Awesome Python","Development tools"],"sub_categories":["Other","Windows Manager","Manual analysis","For Python","Frequently Used","Python","Other dialects and variants","网络服务_其他","Implementations","Runtimes"],"readme":"This is Python version 3.16.0 alpha 0\n=====================================\n\n.. image:: https://github.com/python/cpython/actions/workflows/build.yml/badge.svg?branch=main\u0026event=push\n   :alt: CPython build status on GitHub Actions\n   :target: https://github.com/python/cpython/actions\n\n.. image:: https://dev.azure.com/python/cpython/_apis/build/status/Azure%20Pipelines%20CI?branchName=main\n   :alt: CPython build status on Azure DevOps\n   :target: https://dev.azure.com/python/cpython/_build/latest?definitionId=4\u0026branchName=main\n\n.. image:: https://img.shields.io/badge/discourse-join_chat-brightgreen.svg\n   :alt: Python Discourse chat\n   :target: https://discuss.python.org/\n\n\nCopyright © 2001 Python Software Foundation.  All rights reserved.\n\nSee the end of this file for further copyright and license information.\n\n.. contents::\n\nGeneral Information\n-------------------\n\n- Website: https://www.python.org\n- Source code: https://github.com/python/cpython\n- Issue tracker: https://github.com/python/cpython/issues\n- Documentation: https://docs.python.org\n- Developer's Guide: https://devguide.python.org/\n\nContributing to CPython\n-----------------------\n\nFor more complete instructions on contributing to CPython development,\nsee the `Developer Guide`_.\n\n.. _Developer Guide: https://devguide.python.org/\n\nUsing Python\n------------\n\nInstallable Python kits, and information about using Python, are available at\n`python.org`_.\n\n.. _python.org: https://www.python.org/\n\nBuild Instructions\n------------------\n\nOn Unix, Linux, BSD, macOS, and Cygwin::\n\n    ./configure\n    make\n    make test\n    sudo make install\n\nThis will install Python as ``python3``.\n\nYou can pass many options to the configure script; run ``./configure --help``\nto find out more.  On macOS case-insensitive file systems and on Cygwin,\nthe executable is called ``python.exe``; elsewhere it's just ``python``.\n\nBuilding a complete Python installation requires the use of various\nadditional third-party libraries, depending on your build platform and\nconfigure options.  Not all standard library modules are buildable or\nusable on all platforms.  Refer to the\n`Install dependencies \u003chttps://devguide.python.org/getting-started/setup-building.html#build-dependencies\u003e`_\nsection of the `Developer Guide`_ for current detailed information on\ndependencies for various Linux distributions and macOS.\n\nOn macOS, there are additional configure and build options related\nto macOS framework and universal builds.  Refer to `Mac/README.rst\n\u003chttps://github.com/python/cpython/blob/main/Mac/README.rst\u003e`_.\n\nOn Windows, see `PCbuild/readme.txt\n\u003chttps://github.com/python/cpython/blob/main/PCbuild/readme.txt\u003e`_.\n\nTo build Windows installer, see `Tools/msi/README.txt\n\u003chttps://github.com/python/cpython/blob/main/Tools/msi/README.txt\u003e`_.\n\nIf you wish, you can create a subdirectory and invoke configure from there.\nFor example::\n\n    mkdir debug\n    cd debug\n    ../configure --with-pydebug\n    make\n    make test\n\n(This will fail if you *also* built at the top-level directory.  You should do\na ``make clean`` at the top-level first.)\n\nTo get an optimized build of Python, ``configure --enable-optimizations``\nbefore you run ``make``.  This sets the default make targets up to enable\nProfile Guided Optimization (PGO) and may be used to auto-enable Link Time\nOptimization (LTO) on some platforms.  For more details, see the sections\nbelow.\n\nProfile Guided Optimization\n^^^^^^^^^^^^^^^^^^^^^^^^^^^\n\nPGO takes advantage of recent versions of the GCC or Clang compilers.  If used,\neither via ``configure --enable-optimizations`` or by manually running\n``make profile-opt`` regardless of configure flags, the optimized build\nprocess will perform the following steps:\n\nThe entire Python directory is cleaned of temporary files that may have\nresulted from a previous compilation.\n\nAn instrumented version of the interpreter is built, using suitable compiler\nflags for each flavor. Note that this is just an intermediary step.  The\nbinary resulting from this step is not good for real-life workloads as it has\nprofiling instructions embedded inside.\n\nAfter the instrumented interpreter is built, the Makefile will run a training\nworkload.  This is necessary in order to profile the interpreter's execution.\nNote also that any output, both stdout and stderr, that may appear at this step\nis suppressed.\n\nThe final step is to build the actual interpreter, using the information\ncollected from the instrumented one.  The end result will be a Python binary\nthat is optimized; suitable for distribution or production installation.\n\n\nLink Time Optimization\n^^^^^^^^^^^^^^^^^^^^^^\n\nEnabled via configure's ``--with-lto`` flag.  LTO takes advantage of the\nability of recent compiler toolchains to optimize across the otherwise\narbitrary ``.o`` file boundary when building final executables or shared\nlibraries for additional performance gains.\n\n\nWhat's New\n----------\n\nWe have a comprehensive overview of the changes in the `What's new in Python\n3.16 \u003chttps://docs.python.org/3.16/whatsnew/3.16.html\u003e`_ document.  For a more\ndetailed change log, read `Misc/NEWS\n\u003chttps://github.com/python/cpython/tree/main/Misc/NEWS.d\u003e`_, but a full\naccounting of changes can only be gleaned from the `commit history\n\u003chttps://github.com/python/cpython/commits/main\u003e`_.\n\nIf you want to install multiple versions of Python, see the section below\nentitled \"Installing multiple versions\".\n\n\nDocumentation\n-------------\n\n`Documentation for Python 3.16 \u003chttps://docs.python.org/3.16/\u003e`_ is online,\nupdated daily.\n\nIt can also be downloaded in many formats for faster access.  The documentation\nis downloadable in HTML, EPUB, and reStructuredText formats; the latter version\nis primarily for documentation authors, translators, and people with special\nformatting requirements.\n\nFor information about building Python's documentation, refer to `Doc/README.rst\n\u003chttps://github.com/python/cpython/blob/main/Doc/README.rst\u003e`_.\n\n\nTesting\n-------\n\nTo test the interpreter, type ``make test`` in the top-level directory.  The\ntest set produces some output.  You can generally ignore the messages about\nskipped tests due to optional features which can't be imported.  If a message\nis printed about a failed test or a traceback or core dump is produced,\nsomething is wrong.\n\nBy default, tests are prevented from overusing resources like disk space and\nmemory.  To enable these tests, run ``make buildbottest``.\n\nIf any tests fail, you can re-run the failing test(s) in verbose mode.  For\nexample, if ``test_os`` and ``test_gdb`` failed, you can run::\n\n    make test TESTOPTS=\"-v test_os test_gdb\"\n\nIf the failure persists and appears to be a problem with Python rather than\nyour environment, you can `file a bug report\n\u003chttps://github.com/python/cpython/issues\u003e`_ and include relevant output from\nthat command to show the issue.\n\nSee `Running \u0026 Writing Tests \u003chttps://devguide.python.org/testing/run-write-tests.html\u003e`_\nfor more on running tests.\n\nInstalling multiple versions\n----------------------------\n\nOn Unix and Mac systems if you intend to install multiple versions of Python\nusing the same installation prefix (``--prefix`` argument to the configure\nscript) you must take care that your primary python executable is not\noverwritten by the installation of a different version.  All files and\ndirectories installed using ``make altinstall`` contain the major and minor\nversion and can thus live side-by-side.  ``make install`` also creates\n``${prefix}/bin/python3`` which refers to ``${prefix}/bin/python3.X``.  If you\nintend to install multiple versions using the same prefix you must decide which\nversion (if any) is your \"primary\" version.  Install that version using\n``make install``.  Install all other versions using ``make altinstall``.\n\nFor example, if you want to install Python 2.7, 3.6, and 3.15 with 3.15 being the\nprimary version, you would execute ``make install`` in your 3.15 build directory\nand ``make altinstall`` in the others.\n\n\nRelease Schedule\n----------------\n\nSee `PEP 826 \u003chttps://peps.python.org/pep-0826/\u003e`__ for Python 3.16 release details.\n\n\nCopyright and License Information\n---------------------------------\n\n\nCopyright © 2001 Python Software Foundation.  All rights reserved.\n\nCopyright © 2000 BeOpen.com.  All rights reserved.\n\nCopyright © 1995-2001 Corporation for National Research Initiatives.  All\nrights reserved.\n\nCopyright © 1991-1995 Stichting Mathematisch Centrum.  All rights reserved.\n\nSee the `LICENSE \u003chttps://github.com/python/cpython/blob/main/LICENSE\u003e`_ for\ninformation on the history of this software, terms \u0026 conditions for usage, and a\nDISCLAIMER OF ALL WARRANTIES.\n\nThis Python distribution contains *no* GNU General Public License (GPL) code,\nso it may be used in proprietary projects.  There are interfaces to some GNU\ncode but these are entirely optional.\n\nAll trademarks referenced herein are property of their respective holders.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpython%2Fcpython","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fpython%2Fcpython","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fpython%2Fcpython/lists"}