u8slvn/sutoppu

This system is a Python library implementing the Specification design pattern, providing a base class for defining and combining domain-specific business rules using logical operators. It includes comprehensive test coverage and is configured with Poetry for dependency management and static type checking.

Added the 'sutoppu' package, a Python library implementing the Specification pattern. The library provides a base 'Specification' class that automatically handles error reporting via a metaclass decorator, allowing users to define domain-specific business rules that can be combined using logical operators (AND, OR, NOT) and evaluated against candidate objects.

src · high confidence

Added comprehensive tests for the specification pattern, including validation that the Specification base class enforces the is\_satisfied\_by method, and verifies the behavior of logical operators (AND, OR, NOT) and chained specifications. Additionally, tests confirm that error reports are generated correctly for failed specifications and that the error state resets after two uses.

tests · high confidence

The project has migrated its build and dependency management from a previous system to Poetry, introducing a new \pyproject.toml\ and \poetry.lock\ file. This includes adding \mypy\ as a development dependency for static type checking, updating test dependencies like \pytest\ and \tox\, and specifying Python version support (3.8.1+). The lockfile also records specific versions for packages such as \coverage\, \exceptiongroup\, and \filelock\, ensuring reproducible builds.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 66 → 67 (+1.2)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 59 → 59 (+0.0)
• Readiness 63 → 67 (+3.8)
• Security 88 → 92 (+3.3)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• High: security finding (details withheld)
• High: security finding (details withheld)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• No exposed public API
• Test reliability not included
• single-maintainer — knowledge-concentration (bus factor) risk

• Dependency hygiene PARTLY measured — Python dependencies read, no exact pin to grade for currency
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium CVE: [GHSA redacted] (poetry.lock)
• Medium: security finding (details withheld)
• Medium: security finding (details withheld)
• No dependency advisory monitoring
• Workflow token permissions not restricted

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

u8slvn/sutoppu was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.