Skip to main content

omicstra

a multi-agent MCP server for cross-modal embedding alignment, fusion, and evidence-based routing in spatial biology. it exposes fixed scientific protocols as tools and returns evidence; the client holds the model. alignments are evaluated against declared metrics, and questions are routed from a cohort's own recorded evidence, refusing when that evidence is absent. foundation model encoders are pluggable; integration strategy is a configurable experimental dimension, not a fixed pipeline choice.

the seed implementation evaluates 92 TNBC patients from Wang et al. 2024 using H&E morphology (Virchow2 primary, UNI2 swap) and spatial transcriptomics (Novae GNN).

release License: MIT DOI

v1.0.0 · v1.1.0a1 pre-release · v1.1.0 ResearchHub Foundation grant Brenden-Colson Center / Sears Lab, OHSU

v1.0 ships the read path (inventory, EDA, admissibility gate, routing) over stdio and HTTP, the alignment and evaluation stages verified bit-identical against the published grid, and the seed cohort's evidence pack in the repo, so a fresh clone can route without training anything. The package itself ships no cohort: pip install omicstra gets the contracts, and you point it at a cohort directory.

v1.1 is omicstra run: embeddings extracted here rather than resolved, the niche join, H1/H2/H3 as a chain, and a promotion step where a person approves the pack, with the report rendered from a cohort-agnostic template. Laptop-only for both.

That report is a template, not this cohort's report. The renderer takes a pack and a record ledger and knows nothing about tnbc-92 - sections appear because a record exists, so a cohort that never ran H3 has no H3 section and says why. That is what makes a second cohort's report free: same code, different declarations. See design/v1_1_scope.md.


analysis pipeline

cross-modal alignment of histopathology and spatial transcriptomics at niche scale

Figure 1 | Cross-modal alignment of histopathology and spatial transcriptomics at niche scale.

A single 16 µm section is stained and imaged for H&E, after which the coverslip is removed and the same section is permeabilised in situ for spatial transcriptomics, so morphology and expression share physical coordinates with no registration error between them (one of three consecutive sections per frozen block; Wang et al. 2024). The unit of analysis is a niche of seven neighbouring spots (100 µm spot diameter, 150 µm centre-to-centre; ~1,200-1,400 cells).

Left - two measurements yield three representations. Virchow2 encodes seven H&E tiles per niche as a 7 × 1280 matrix; Novae encodes the spatial counts as a 64-d vector; gpath2vec encodes Reactome pathway activity inferred from those same counts as a 512-d vector, concatenated with Novae to a 576-d molecular vector. All encoders are frozen.

Centre - ten arms differ only in how the two sides are joined. Six are trained contrastively (labelled R) and four are closed-form baselines with no training (labelled B). Five contrastive arms mean-pool the seven tiles into a single 1280-d vector before the two sides meet - four over the full molecular vector (R1, R2, R3, R5) and one with the pathway representation removed (R6) - while a sixth leaves the tiles un-pooled and lets the molecular side attend over them individually (R4, cross-attention). The baselines join the two sides directly by canonical correlation (B1), orthogonal Procrustes rotation (B2), principal components (B3), or a random projection as an untrained control (B4). Inputs, the patient-stratified split (85/15, seed 42) and all downstream evaluation are held identical across arms.

Right - every arm projects to a shared 512-d space and is evaluated on 35,594 niches from 14 held-out patients: cross-modal retrieval (H1; Recall@K, MRR, median rank, alignment gap, AUC, CKA), preservation of biological structure (H2; ARI, silhouette) and pathway interpretability (H3; canonical correlation against a permutation null).


evidence, defined

Evidence is a measurement of how well a method performs one task on this cohort, scored against a stated reference, compared to a floor, and traced to the artifact that produced it.

Five parts, all required:

  1. Units - what was scored, and how held out. Here: niches, held out by patient.
  2. Reference - the ground truth for that question.
  3. Statistic - the maths applied: area under the receiver operating characteristic curve (AUC), adjusted Rand index (ARI), canonical correlation analysis (CCA), or a z-score against a permutation null.
  4. Floor or null - what the number must beat to mean anything.
  5. Guards - conditions that would make the number misleading even when it is high.

the reference is per question

question ground truth where it comes from
cross-modal retrieval the known pairing - which haematoxylin and eosin (H&E) niche is which spatial transcriptomics (ST) niche the assay itself, same physical section
tissue state grouping mc_megacluster, 14-class non-negative matrix factorisation (NMF) label. Normalised mutual information (NMI) 0.539 against patient identity, above the 0.5 bar - so ARI here is diagnostic and cannot rank the aligned methods against each other; the 9-archetype label is worse (0.645) and was dropped per-spot NMF, molecular
subject identity suppression tumour immune microenvironment (TIME) class vs patient identity clinical and pathology classification
morphology decode tertiary lymphoid structure (TLS) gene-signature score molecular, continuous
pathway transfer Reactome pathway membership curated knowledge graph, no human label
compartment agreement pathologist annotation (Wang: 15 categories). Not bound on the seed cohort, so this question routes to compute rather than to evidence pathologist annotation

Pathologist annotations and molecular clusters are both references - each for the questions where it is the right one. Retrieval needs no label at all, because the correspondence is the truth. Pathway transfer uses a knowledge graph and a permutation null instead of a label.

A number without all five parts is not evidence. An ARI with no floor, or one scored against a label that encodes patient identity, is a number, and the guard is what says so.


using omicstra

A question travels in three steps. A model reads the question and picks the task family; a rule does everything after that. The server itself holds no model.

human question  ->  task family  ->  route(task_id)  ->  outcome + why
   (a model)         (7 defined)       (a rule)          (recorded)

ask which method answers a question

"Given a piece of tissue image, which method best finds its matching expression profile?"

A model maps that to the family cross_modal_retrieval and calls the route tool. On the command line:

$ omicstra route cross_modal_retrieval --project-id tnbc-92

[RECOMMEND] InfoNCE, cross-attention
  why: AUC, matched vs mismatched pairs, cross-subarray patient-held-out:
       0.8591 [0.8576, 0.8608]. below the floor: random-init projection,
       unaligned principal components
  record_id: ccbcf5ec8e9b

name a method, and the evidence can decline it

"Can I use canonical correlation analysis to pool across patients?"

That is the family subject_identity_suppression, with a method named:

$ omicstra route subject_identity_suppression --proposed-method B1_v3

CCA is contraindicated for this task. It scores below what the raw un-aligned
modality already achieves: bio/patient ratio 0.071 [0.053, 0.088], below the
raw H&E floor of 0.137. patient z 113.0 against raw H&E 36.8.
proceed anyway? [y/N]

Proceeding is permitted, and is recorded as a decision taken against the evidence.

check the evidence still holds

"Do the published numbers still come out of the data?"

$ omicstra run --project-id tnbc-92 --diff projects/tnbc-92/routing_evidence.json
  ok embed_he  ok embed_st  ok niche_join  ok align  ok eval  ok promote
  diff: 1 disagreement - pathway_transfer/B3_v3 absent_from_curated

Every routed number traces to a named artifact; this is the check that says so.

start a new cohort

"What can this dataset answer?"

omicstra init --project-dir projects/mine   # scaffold the declarations
omicstra inventory                          # what the data is
omicstra gate                               # is it usable
omicstra families                           # what it can answer, and what it cannot

A cohort with no evidence of its own is not routable, and the server says so rather than reusing another cohort's winner.

the tools

tool answers
list_task_families which questions this cohort can be asked
route which method answers one question, or why none does
describe_data_structure what the data is, as declared
check_eda_gate is the cohort admissible, and on what grounds
run_eda_step re-run one admissibility check, with its permutation null
plot_spatial_autocorrelation the spatial signal behind that check, as a figure
plot_evidence the evidence behind one answer, as a figure
decision_record what has been decided here, by rule and by person
check_compute_gates what a compute run would need answered first
describe_compute_plan what it would read, write, and leave untouched

hypotheses

metrics
H1 aligned embeddings retrieve better cross-modal matches than any unaligned baseline Recall@K - MRR - median rank - alignment gap - AUC - CKA
H2 manifold alignment preserves biological structure better than either modality alone
    A spatial states cluster more coherently in the aligned space than in either modality alone ARI - silhouette
    B alignment quality varies across compartments - morphologically distinct ones (tumour, TLS, necrosis) above ambiguous ones (high- vs low-TIL stroma) matched-pair cosine per compartment
H3 shared space encodes interpretable biological pathway signals CCA vs permutation null

early vs late fusion is an experimental variable, not an assumption.


seed cohort results (v3, 10-run grid)

evaluated on 35,594 niches across 14 held-out TNBC patients (zero patient leakage across train / val / test). 6 contrastive runs (R1-R6) + 4 classical baselines (B1-B4):

  • H1 (cross-modal retrieval). R4 wins. AUC 0.859 (95% CI 0.855-0.862). R4 is the only run using cross-attention - the other 5 contrastive runs use late fusion (mean-pooled H&E + independent MLPs).
  • H2 (biology preservation). Split outcome. Late-fusion contrastive (R1, R6) wins K-means MC ARI; R4 still encodes MC biology at linear-probe parity. KMeans-ARI is geometry-biased - load-bearing diagnostic is the linear probe.
  • H3 (pathway transfer). R4 wins again. 15/15 cells BH-FDR < 0.05 cross-patient (Welch z 3.8-5.7). At DAG resolution, R4 stays best (78% sig nodes) on clinically interpretable hits: BTLA checkpoint, IL signaling, IFN regulation, ECM collagen biology.

R4 = the only non-late-fusion run (cross-attention between the niche's 7 Virchow2 tile tokens and the 576-d ST vector). H1 + H3 both reward keeping local morphological heterogeneity un-pooled.


the loop

a level is what code is allowed to do (LEVEL 0/1/2 in the tree below); the loop is the order a cohort goes through. they are different axes and the words are easy to confuse:

layer 0: EDA (gate)
  is data usable? quality? signal? modalities alignable?
  -> proceed / proceed with caution / stop

layer 1: pipeline (execution)
  embed -> align -> eval
  fixed protocol, deterministic with seed

layer 2: karpathy loop (outer optimization)
  editable asset: alignment_config.json
  scalar metric: Recall@K or MRR (fixed)
  proposes config -> runs pipeline -> scores -> keeps or discards
  output: git log of validated decisions + winner.json

program.md defines search space, constraints, stopping criteria.

embedding dimensions: Virchow2 1280d (primary) / UNI2 1536d (alternative) - Novae GNN 64d (novae_latent) -> shared 512d

alignment strategies (experimental variable):

  late interaction  - tiles aggregated per spot (mean/max),
                      then independent MLPs -> shared 512d (InfoNCE)
  early interaction - tile-level cross-attention between H&E tokens
                      and ST spot before projection (~4M params, local K tiles)
  comparison: does tile-level morphological detail lost at aggregation
              matter for cross-modal alignment quality?

repo structure

audited against the filesystem 2026-09-11. · is built, ○ is named in the design and not yet built - kept here because the name is referenced elsewhere, not because it exists.

omicstra/
│
· CLAUDE.md                          # north star for Claude Code
· EDA.md                             # gate - data quality checks before pipeline
· PLAN_RULES.md                      # constraints - no alignment until EDA passes
· MODELS.md                          # training provenance + tissue compatibility per model
· MODALITY_TEMPLATE.md               # the contract a new modality generates against
· CITATION.cff  server.json          # citation metadata - MCP registry entry
· .mcp.json  .env.example            # MCP server entry - optional tracing only
│
· design/                            # the planning tree - tracked, this is where "what next" lives
│   · v1_1_scope.md                  # the NEXT release's boundary. read before adding
│   · mcp_plan.md  workflow.md       # engineering plan - the executable graph
│   · decisions.md                   # what is decided, and by whom
│   · progress.md  status.md         # build log - repo snapshot
│
· src/omicstra/                      # the pip-installable package - src layout
│   · graph.py                       # LEVEL 0 - the only entry, the only checkpointer
│   · graphs/                        # LEVEL 1 - one per gate, each can interrupt()
│   │   · eda.py                     #   inventory -> profile -> gate -> escalate
│   │   · route.py                   #   orchestrator -> 3 agents -> judge -> ask_human
│   │   · encode.py  promote.py      #   compute, and the reviewed evidence step
│   · protocols/                     # LEVEL 2 - order, applicability, authority. no maths
│   │   · inventory.py               #   8 steps: files .. bind - "what is this data"
│   │   · eda.py                     #   10 checks registered - "is it usable"
│   │   · align.py                   #   4 stages. resolve or compute
│   │   · evaluate.py                #   6 guards, and the H1-H3 gates
│   · measures/                      # the MATHS. pure functions, no ctx, no order,
│   │   · __init__.py                #   no authority. callable from a notebook
│   │   · tiling.py                  #   niche + tile geometry, diffed against the cache
│   · contracts/                     # READS a declaration, decides nothing
│   │   · project.py                 #   a cohort's project.json
│   │   · routing.py  eda.py         #   contract + evidence · contract + calibration
│   · configs/                       # the CONTRACTS, inside the wheel so an
│   │   · data_contract.json         #   installed server can find them. 8 declared
│   │   · eda_contract.json          #   roles · which checks, which criteria
│   │   · routing_contract.json      #   task taxonomy, outcome vocabulary, rules
│   │   · compute_contract.json      #   6 gates: 5 preflight, 1 mid-run
│   · adapters/canonical.py          # the input contract: .h5ad + a coordinates table.
│   │                                #   scripts/ingest_<cohort>.py converts, ONCE
│   · models/encoders.py             # the encoder registry, resolved by declared name.
│   │                                #   spec() is metadata; only load() needs torch
│   · agents/modality.py             # he / st / pathway agents - read recorded evidence
│   · mcp/server.py                  # 8 tools, 4 resources, stdio + http. zero model calls
│   · records.py  artifacts.py       # the record contract - inventory/eda_summary io
│   · settings.py  cli.py            # 8 commands. settings imports nothing from omicstra
│   · routing.py  eda.py  figures.py # resolve + ledger · gate · plots
│
│   the rule: a thing gets its own graph only if it can ask a human;
│   everything else is a protocol. a new .py never lands in src/omicstra/ directly.
│
· configs/v3/                        # R1_v3 .. R6_v3 run configs (cohort runs, not contracts)
│
· projects/                          # committed - one directory per cohort
│   · {project_id}/
│       · project.json  program.md   # encoders, runs, metric · search space + constraints
│       · cohort.json                # DECLARED: subject_id_column, classification,
│       │                            #   compute_backend, client_model_backend - fail closed
│       · platform.json              # DECLARED per sample: platform, position_columns, pitch
│       · inventory.json             # inventory protocol output - conformance report
│       · eda_summary.json           # EDA gate output
│       · routing_evidence.json      # this cohort's measured evaluation - never inherited
│
· site/{institution}/  [ignored]     # compute.md governance.md - served as MCP resources
· scripts/                           # the chain behind the published results
· tests/                             # 148 - conformance, routing, eda authority,
│                                    #   tiling oracle, ingest paths
│   · fixtures/                      #   the pinned H1 summary, sha-guarded
○ knowledge/reactome/                # shared domain assets - git-IGNORED, not in a clone.
│                                    #   only scripts/build_pathway_class.py reads it
· docs/                              # -> teslajoy.github.io/omicstra
· notebooks/                         # exploration - embeddings - experiments - final
· runs/  data/  demo/  [ignored]     # traces - inputs + embeddings - talk assets

extending to a new modality

MODALITY_TEMPLATE.md is the contract a new modality agent (single-cell, protein, electron microscopy, etc.) must satisfy: a frozen foundation-model encoder, a niche-aggregation step, a clean ST/H&E-equivalent feature parquet shape, and the construct-validity guards the eval agent enforces. each modality adds one row to the alignment grid and one entry to the routing contract.


seed cohort

Wang et al. 2024 - 92 TNBC patients, co-registered ST + H&E WSI. platform: original Spatial Transcriptomics (Stahl et al. 2016, KTH/Spatial Transcriptomics AB) - 1934 spots/array, 100um diameter, 150um center-to-center.

resource url
processed data doi:10.5281/zenodo.14204217 (mc-labels release also at doi:10.5281/zenodo.8135721)

quick start

pip install omicstra                # serves, routes, gates - no numpy, no tensor libraries
pip install "omicstra[measure]"     # + the numerics, for computing inventory and EDA steps

the package ships its contracts and no cohort. point it at one:

export OMICSTRA_PROJECT_DIR=/path/to/projects/tnbc-92
omicstra selftest        # start here: asserts the routing rules hold on this cohort
omicstra describe        # what the cohort declares - platform, encoders, roles
omicstra families        # which questions it can answer, and which it cannot yet
omicstra route cross_modal_retrieval

omicstra --help lists all eight: selftest, describe, families, route, gate, eda, decisions, init. selftest first - it tells a new cohort owner whether their declarations and evidence hang together before they spend time on anything else.

stdio - the usual client config:

{ "mcpServers": { "omicstra": {
    "command": "python", "args": ["-c", "from omicstra.mcp.server import serve; serve()"],
    "env": { "OMICSTRA_PROJECT_DIR": "/path/to/projects/tnbc-92" } } } }

streamable-http - serve(mode="http"), then note the envelope:

curl -s -X POST http://127.0.0.1:8000/mcp \
  -H 'Content-Type: application/json' \
  -H 'Accept: application/json, text/event-stream' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{"_meta":{
        "io.modelcontextprotocol/protocolVersion":"2026-07-28",
        "io.modelcontextprotocol/clientCapabilities":{}}}}'

the _meta block is not optional and is the first thing a new http caller gets wrong. protocol revision 2026-07-28 removed the initialize handshake, so the version travels on every request rather than being negotiated once. a call without it is refused with -32602, naming the two keys it wants.

a cohort with no evidence pack is not routable, and the compute path refuses rather than improvising: route declines instead of inheriting another cohort's winner, and run_align raises ComputeUnavailable naming the missing artifact and the script that builds it. that refusal is the expected first response on a fresh install, not a failure.


stack

layer tool
orchestration LangGraph StateGraph
model supplied by the MCP client; the server ships none
tracing OpenTelemetry-ready; LangSmith optional via env, not a dependency
resources omicstra://eda-contract, routing-contract, project/{id}/routing-evidence
H&E foundation model Virchow2 (primary, 1280-d) - UNI2 as swap (1536-d)
ST foundation model Novae GNN
pathway gpath2vec + biological pathway embeddings
alignment contrastive MLP + cross-attention bridge
compute laptop (v1.0); SLURM planned
interface Model Context Protocol

reproducibility

every run writes runs/{project_id}/{run_id}/ - config, QC, embeddings, alignment, evaluation, synthesis. notebooks/final/ contains the best run as a notebook, drafted with a model from the run trace and reviewed by hand; reruns go top-to-bottom with a fixed seed.


deliverables

  • v3 10-run alignment grid on TNBC-92
  • pip-installable MCP server (MIT) - verified on python 3.11 / 3.12 / 3.14
  • alignment checkpoint + model card (teslajoy/omicstra-r4-v3)
  • embeddings and niche join deposited (Zenodo)
  • second-modality plug-in via MODALITY_TEMPLATE.md (target: CODA or CyCIF)

how the evidence pack is produced

The router reads projects/{id}/routing_evidence.json. No script writes it.

eval summaries  ──▶  proposed evidence   deterministic: winners, margins, refusals
                ──▶  a person reviews, edits the notes, approves
                ──▶  routing_evidence.json

Deciding which metric answers which task family, what the floors are, and which caveat attaches to which candidate is editorial work - the file's own notes argue with the report in places. Generating it would invent the judgements it records, so run_eval scores the grid and resolves the pack; it never produces one.

omicstra promote computes the half that is computable - candidates, intervals, floors, guard verdicts and the contract's outcome - and asks a person for the rest. It is a gate rather than a protocol because it pauses, and it refuses a pack in which a measurement was authored. Rebuilding this cohort reproduces every value and interval in the curated pack.

The acceptance test for the port is pinned in tests/fixtures/: a full-grid rerun with one retrained baseline reproduced every numeric field of the H1 summary, and the fixture is checked against the evidence pack so the router can never quote a number nothing produced.


declared deviation from the proposal

The registered report put a model inside the orchestration: one model for intent classification and routing, another for hypothesis evaluation, with conditional routing in the graph.

The build moved the model to the client and made routing a deterministic rule over evidence. The server holds no model, generates no code, and executes nothing a model wrote. A model has three narrow jobs, all on the client side: classify a question into a closed task set, choose among enumerated options at a gate, and write the "why". Everything downstream resolves from lookup tables.

The reason is reviewability. A server with no model is portable across clients, has no second router to reason about, and can be reviewed for what it does rather than what it might decide. It also means swapping the model cannot change a route

  • the same question reaches the same method, because the method came from recorded evidence rather than from inference.

Deliverables, metrics and hypotheses are unchanged.


team

Nasim Sanati, M.S. - AI/ML systems - MCP server - agent orchestration - embedding pipelines

Brenden-Colson Center for Pancreatic Care / Sears Lab, OHSU


citation

@software{sanati2026omicstra,
  author  = {Sanati, Nasim},
  title   = {omicstra: a multi-agent MCP server for cross-modal embedding alignment
             and evidence-based routing in spatial biology},
  year    = {2026},
  doi     = {10.5281/zenodo.22754114},
  url     = {https://github.com/teslajoy/omicstra},
  license = {MIT}
}

that is the concept DOI - it resolves to the newest archived version and never goes stale. cite it unless you need to pin one release, in which case use that release's own version DOI from the Zenodo record.

funded by ResearchHub Foundation (doi:10.55277/researchhub.6ou1w3h3)
nonprofit recipient: OHSU Foundation - EIN 23-7083114
seed cohort: Wang et al. 2024, Nat. Commun. 15:10232

Metadata

Release files for omicstra 1.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for omicstra 1.1.0
File Size Uploaded Provenance Actions
omicstra-1.1.0.tar.gz 171.5 kB With provenance Details for omicstra-1.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for omicstra 1.1.0
File Interpreter ABI Platform Actions
omicstra-1.1.0-py3-none-any.whl Python 3 none any Details for omicstra-1.1.0-py3-none-any.whl

Total release size: 357.5 kB

Release files / omicstra-1.1.0.tar.gz

Download URL omicstra-1.1.0.tar.gz
Size 171.5 kB
Tags Source
SHA-256 checksum
How to use checksums
e864897c69ecba0772d407a2ae7a2901a722565922c54244ca8a1835e71aac84
BLAKE2b-256 checksum
How to use checksums
4628ed98de562ecd33813ae4435fb8b4e296f19bcc27a9e539272112820503f3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 16, 2026.

Transparency log

Release files / omicstra-1.1.0-py3-none-any.whl

Download URL omicstra-1.1.0-py3-none-any.whl
Size 186.0 kB
Tags Python 3
SHA-256 checksum
How to use checksums
dd2a09b439080c41ca7e0521a5e5b8648c067eaf900d8149c44948f1839af600
BLAKE2b-256 checksum
How to use checksums
501441a1fe1712225a5948945039f4d796713fe68f6cddbae166c3529f189ab2
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 16, 2026.

Transparency log

Security for omicstra 1.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for omicstra-1.1.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 16, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page