The old intro recommended Kitten TTS and VibeVoice, which the 2026-10-02 audit removed from the README section.
Co-Authored-By: Claude <noreply@anthropic.com>
graphify's PyPI override was null (GitHub-only), so the site showed no download count although the project now publishes on PyPI as graphifyy.
Co-Authored-By: Claude <noreply@anthropic.com>
Dual-listing was allowed whenever a tool "earns its slot in each independently", which admits a challenger-tier second copy.
Co-Authored-By: Claude <noreply@anthropic.com>
The audit skill asked removal commits for a downloads figure without its source or fetch date, so the 2026-08 audit bodies could not be compared with later ClickPy or pypistats figures; it also ran make build right after the last commit, while added or renamed entries have no download cache row until the ClickPy sweep re-runs.
Co-Authored-By: Claude <noreply@anthropic.com>
jev-ultrafast's line read like a self-contained browser agent, but its README requires a TYPESAFE_API_KEY because action selection runs on TypeSafe's hosted Jev service.
Co-Authored-By: Claude <noreply@anthropic.com>
jev-ultrafast is not published on PyPI but had no null override, so every download sweep queried PyPI for it and recorded NOT_FOUND.
Co-Authored-By: Claude <noreply@anthropic.com>
Standing maintainer decisions (the August schedule and httpie keeps, uv-audit's experimental status, jev-ultrafast's admission, the three 6-entry caps) lived only in old commit bodies or conversation, so the next audit would re-drop them as rule failures.
Co-Authored-By: Claude <noreply@anthropic.com>
The download sweep queried PyPI by display name, but PyPI conda is a stale 2017 upload and PyPI pyodide is a 0.0.2 placeholder, so the site showed unrelated packages' download counts for both entries.
Co-Authored-By: Claude <noreply@anthropic.com>
Four display names broke the naming convention (display name = PyPI package name): jupyter linked the notebook project while PyPI jupyter is a metapackage, and factory_boy, pygobject and kivy differ from their PyPI names factory-boy, PyGObject and Kivy.
Co-Authored-By: Claude <noreply@anthropic.com>
Hardware had no serial-port library, though pyserial is the standard answer at about 12M downloads/month, roughly 8x the largest listed Hardware entry.
Co-Authored-By: Claude <noreply@anthropic.com>
Two sections broke the downloads-order rule: bleak sat above pynput, which has more downloads, and pythonnet sat above pywin32, which has about seven times more.
Co-Authored-By: Claude <noreply@anthropic.com>
Web Security had no HTML sanitizer since bleach was removed as deprecated; only justhtml in HTML Manipulation sanitizes, as part of parsing.
Co-Authored-By: Claude <noreply@anthropic.com>
Penetration Testing had no library for Windows and Active Directory protocol work (SMB, Kerberos, NTLM relay).
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: social-engineer-toolkit (no PyPI download signal; not published on PyPI): a standalone social-engineering console rather than something Python developers use in their Python work, so it fails Serves Python Developers; its pyproject also requires Python >=3.11,<3.14. Its slot goes to impacket and pwntools in the next commits.
Co-Authored-By: Claude <noreply@anthropic.com>
hydra-core linked facebookresearch/hydra, which redirects to hydra-ecosystem/hydra after a repo transfer (same GitHub repo id), and an earlier commit had treated the new location as an unrelated project.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: shiv (224,563 downloads/month, pypistats 2026-10-02): displaced by pex (4,682,918/month on the same source, released 2026-10-02), the more-used and more-active builder for the same self-contained zipapp job; shiv's last release was 1.0.8 on 2024-11-01.
Co-Authored-By: Claude <noreply@anthropic.com>
Build Backends omitted poetry-core, the backend of every Poetry project, at 88,000,485 downloads/month; about 47M remains without poetry, still 3x uv-build.
Co-Authored-By: Claude <noreply@anthropic.com>
Package Repositories omitted pypiserver, the minimal self-hosted index the PyPA hosting guide names alongside devpi, which has 5x the downloads of devpi-server.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: warehouse (no PyPI download signal; not a pip-installed package): the section is self-hosted servers, proxies, and mirrors, and Warehouse is not one. Its docs call pypi.org the canonical deployment and document only a local development setup, and the PyPA guide to hosting your own repository does not list it. Also: devpi (99,216 downloads/month for devpi-server, pypistats 2026-10-02) moves above bandersnatch (4,351) to follow the downloads order.
Co-Authored-By: Claude <noreply@anthropic.com>
The uuid-utils line set it apart by RFC 9562 support (UUIDv6, v7, v8), but the standard library uuid module gained uuid6, uuid7 and uuid8 in Python 3.14, so that no longer distinguishes it.
Co-Authored-By: Claude <noreply@anthropic.com>
pygame led Game Frameworks although its last release, 2.6.1, has no Python 3.14 wheel and the source build fails, while the actively developed drop-in replacement pygame-ce sat below it.
Co-Authored-By: Claude <noreply@anthropic.com>
Audio listed no general audio file I/O library, though soundfile is the standard libsndfile reader and writer under librosa.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: vidgear (10,854 downloads/month, pypistats 2026-10-02): a challenger with no adoption trajectory (about half its August count), not anyone's unprompted answer next to moviepy and PyAV. Also: pydub moves below librosa to Second Tier under the Python-version rule; its only release, 0.25.1 (2021), fails `import pydub` on Python 3.13+ without audioop-lts, but it still has 17,778,797 downloads/month.
Co-Authored-By: Claude <noreply@anthropic.com>
PDF omitted pymupdf, the second most-installed PDF library at 81,101,392 downloads/month (pypistats 2026-10-02) and the fastest at text extraction and page rendering.
Co-Authored-By: Claude <noreply@anthropic.com>
beautifulsoup4 sat above lxml although lxml now has more monthly downloads (313.9M vs 297.1M), and the reportlab link redirected to the docs site.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: sqids (537,334 downloads/month, pypistats 2026-10-02): fails the 12-month activity line (last commit 2025-03-26, last release 2025-05-13), and its predecessor hashids still draws about 4x its downloads, so there is no successor trajectory to justify a challenger slot.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: tkdesigner (317 downloads/month, ClickPy 2026-10-01): its only PyPI release, 1.0.7 (2023-01-22), pins Pillow<9, requests==2.25.1 and urllib3<2, so it has no installable wheels on Python 3.11+, which reverses the August keep. gooey (6,049/month): no release since 1.0.8.1 on 2021-06-12. Dropping gooey empties Wrappers, so the subcategory is dissolved and its URL redirects to /categories/gui-development/. Also: Desktop re-tier, dearpygui up to obvious choice (the only Desktop entry that grew since August) and wxPython down to Second Tier (about half its August downloads).
Co-Authored-By: Claude <noreply@anthropic.com>
Network Virtualization lacked netmiko, the standard Python library for SSH network-device automation, though most of its downloads are standalone rather than pulled in by napalm.
Co-Authored-By: Claude <noreply@anthropic.com>
Distributed Computing listed ray first though pyspark and dask now outdraw it, Workflow Orchestration listed apache-airflow and prefect above dagster, which now leads on downloads, and the Network Virtualization description fit neither scapy nor napalm.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: chaostoolkit (11,525 downloads/month, ClickPy 2026-10-01): no adoption-trajectory evidence and falling (about 18K in August); active, so the drop is editorial. Also: awscli's line now says the PyPI package is CLI v1, which entered maintenance mode on 2026-07-15 (end of support 2027-07-15), while v2 ships only as AWS's bundled installer.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: hunter (782,874 downloads/month, pypistats 2026-10-02): fails the 12-month activity line (last commit and release 3.9.0 on 2025-08-22). viztracer (1,173,045/month on the same source, pushed 2026-09-26) takes the Tracing slot.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: freezegun (45,539,075 downloads/month, pypistats 2026-10-02): fails the 12-month activity line (last commit 2025-08-19, last release 2025-08-09), and time-machine (18,960,236/month, released 3.5.1 on 2026-09-08) is an active successor for the same job that ships a freezegun migration tool, so freezegun does not qualify as a mature-stable keep. time-machine takes the slot as a challenger, last in Mock.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: repowise (14,584 downloads/month, pypistats 2026-10-02): no adoption trajectory (about 33K in August to 19.5K on ClickPy), and it left Code Analysis with three challengers against a limit of two. monkeytype (529,705/month): fails the 12-month activity line (default branch last commit 2025-06-14, last release 2023-03-20). Dropping monkeytype empties Type Annotations Generators, so the subcategory is dissolved and its URL redirects to /categories/code-analysis/.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: transitions (2,483,235 downloads/month, pypistats 2026-10-02): fails the 12-month activity line (last commit 2025-09-09, last release 2025-07-02), and python-statemachine (1,430,000-plus/month, released 3.2.1 on 2026-08-01) is an active successor for the same job, so it does not qualify as a mature-stable keep.
Co-Authored-By: Claude <noreply@anthropic.com>
biopython sat above rdkit although rdkit now has more downloads (ClickPy 2026-10-01), against the downloads-order rule.
Co-Authored-By: Claude <noreply@anthropic.com>
Data Validation omitted great-expectations, the most-installed data quality framework at 19,340,380 downloads/month (pypistats 2026-10-02), more than twice pandera's 8,170,879; the audit left it out only because it requires Python <3.14, which the Python-version rule no longer treats as grounds for exclusion.
Co-Authored-By: Claude <noreply@anthropic.com>
Dashboards and Apps omitted Plotly's dash, which outdraws the listed gradio (6,253,566 vs 5,227,393 downloads/month, pypistats 2026-10-02).
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: pygraphviz (528,553 downloads/month, pypistats 2026-10-02): displaced by graphviz (32,829,050/month, part of it catboost pulling it in), which does the same job of building and rendering Graphviz graphs as pure Python with no C build.
Co-Authored-By: Claude <noreply@anthropic.com>
Removed: pathway (8,449 downloads/month, pypistats 2026-10-02): not open source (Business Source License, converting to Apache 2.0 only after four years, with a cloud-resale ban) and flat downloads, so no adoption trajectory for a challenger slot. Also: openbb's link moves to github.com/openbq-org/OpenBB, where OpenBB-finance/OpenBB now redirects after the company's wind-down handed the code to the non-profit OpenBQ.
Co-Authored-By: Claude <noreply@anthropic.com>
Vinta ChenandClaude