🔍 PiPulse

Python Dependency Health Analyzer — scan your requirements.txt and get a full health report on every package: vulnerabilities, version status, GitHub activity, and an overall health score.

pipulse scan requirements.txt

Features

• Vulnerability scanning via the OSV database
• Version check — see which packages are outdated, up-to-date, or ahead
• GitHub activity — ACTIVE / STALE / ABANDONED based on last commit
• Health score — 0–100 score per package and an overall project score
• Three output formats — rich terminal table, HTML report, JSON report
• Handles unpinned packages gracefully

Installation

pip install pipulse

Requires Python 3.9+

Usage

Terminal output

pipulse scan requirements.txt

Generate HTML report

pipulse scan requirements.txt --html
# saves to report.html

pipulse scan requirements.txt --html my_report.html
# saves to custom filename

Generate JSON report

pipulse scan requirements.txt --json
# saves to report.json

pipulse scan requirements.txt --json audit.json

Both at once

pipulse scan requirements.txt --html --json

Example Output

                           PiPulse Report
┌──────────┬─────────┬────────┬────────────┬───────┬───────┬──────────┬────────┐
│ Package  │ Current │ Latest │ Status     │ Vulns │ Stars │ Activity │ Health │
├──────────┼─────────┼────────┼────────────┼───────┼───────┼──────────┼────────┤
│ requests │ 2.28.0  │ 2.31.0 │ Outdated   │ 2     │ 51k   │ ACTIVE   │ 70     │
│ flask    │ 3.0.0   │ 3.0.0  │ Up-to-Date │ 0     │ 67k   │ ACTIVE   │ 100    │
│ pyjwt    │ 1.7.1   │ 2.8.0  │ Outdated   │ 3     │ 5k    │ ACTIVE   │ 55     │
└──────────┴─────────┴────────┴────────────┴───────┴───────┴──────────┴────────┘

Project PiPulse Score: 75/100

Health Score

Each package gets a score from 0 to 100 based on:

The project score is the average across all scanned packages.

Requirements File Format

Standard requirements.txt format is supported:

requests==2.31.0
flask>=3.0.0
packaging

Unpinned packages (no version specified) are flagged and skipped for vulnerability checks.

Limitations

• GitHub data uses the unauthenticated API (60 requests/hour). For large requirements.txt files, GitHub info may return N/A due to rate limiting.
• Vulnerability data is sourced from OSV — coverage varies by package.

License

MIT © Prabanjan R