Package Health Score

69 / 100

security
Security review needed
popularity
Small
maintenance
Healthy
community
Sustainable

Popularity

Small

GitHub Stars: 3
Forks: 43
Contributors: 40

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package invenio-vocabularies, we found that it has been starred 3 times.

Security

Security review needed

Security and license risk for latest version

Release Date: Dec 13, 2024
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
22
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

MIT

Security Policy

We found a way for you to contribute to the project! Looks like invenio-vocabularies is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Healthy

Commit Frequency

Open Issues: 52
Open PR: 10
Last Release: 11 days ago
Last Commit: 15 days ago

Further analysis of the maintenance status of invenio-vocabularies based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that invenio-vocabularies demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: Yes
Code of Conduct: No
Contributors: 40
Funding: No

With more than 10 contributors for the invenio-vocabularies repository, this is possibly a sign for a growing and inviting community.

We found a way for you to contribute to the project! Looks like invenio-vocabularies is missing a Code of Conduct.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: >=3.7

Age: 4 years
Latest Release: 11 days ago
Dependencies: 0 Direct
Versions: 121
Maintainers: 0
Wheels: OS Independent

Readme

Invenio-Vocabularies

Invenio module for managing vocabularies, based on Invenio-Records and Invenio-Records-Resources. This module provides:

Factories for easily generating models, record API classes, services, and resources
Helpers for importing vocabularies

Further documentation is available on

Changes

Version v6.11.0 (released 2024-12-13)

names: fix acronym in marshamllow schema

Version v6.10.1 (released 2024-12-12)

names: drop unique id on the internal id

Version v6.10.0 (released 2024-12-12)

names: add internal id column to the name_metadata db

Version v6.9.0 (released 2024-12-09)

schema: added identifiers in affiliations relation

Version v6.8.0 (released 2024-12-09)

names: extract affiliation identifiers from employments
names: optimize memory usage on ORCID sync
subjects: improve search with CompositeSuggestQueryParser
subjects: added datastream for bodc

Version v6.7.0 (released 2024-11-27)

contrib: improve search accuracy for names, funders, affiliations
names: add affiliation acronym in mappings and schema
- Dereferences the affiliation acronym when indexing names and serving REST API results. This is useful for disambiguating authors in search.
affiliations: move RDF and SPARQL as extra dependencies
- Moves rdflib and SPARQLWrapper to extras.
affiliation: refactored edmo datastreams
subjects: added datastream for GEMET vocabulary
awards/schema.py: read app config for alternate funding validation (#429)
awards: fix description field and mappings
awards: add fields start/end date and description

Version v6.6.0 (released 2024-11-15)

mesh: add title en if not present
subjects: add subject to search fields
jobs: add ORCID job
global: Add unlisted tag
- This adds a new tag to the vocabularies to allow for unlisted vocabularies. This is useful for vocabularies that are not meant to be displayed in the UI.
- This requires to update the names mapping to add the props.

Version v6.5.0 (released 2024-10-31)

subjects: euroscivoc: change default to latest version-less URL
Rename patched filters so the normalizer uses the default ones (#409)
- rename patched filters so the normalizer uses the default ones

Version v6.4.1 (released 2024-10-15)

fix: exclude unknown fields when updating awards with subjects
fix: revert generic writer and define OpenAIRE awards writer logic

Version v6.4.0 (released 2024-10-15)

jobs: add import awards OpenAIRE; Update CORDIS
awards: rollback to use the 2nd part of funding stream as program

Version v6.3.1 (released 2024-10-11)

jobs: pass since as string to task

Version v6.3.0 (released 2024-10-11)

awards: get program from CORDIS
fix: add 'en' title if missing ROR
fix: since not passed to args
jobs: add process funders job

Version v6.2.1 (released 2024-10-10)

webpack: bump react-searchkit due to axios upgrade

Version v6.2.0 (released 2024-10-10)

tests: update axios version (needed only for local js tests)

Version v6.1.0 (released 2024-10-10)

jobs: define invenio job wrapper for ROR affiliation data stream
awards: remove subj props from jsonschema

Version v6.0.0 (released 2024-10-03)

datastreams: writers: add option to not insert
subjects: added euroscivoc datastream
affiliations: OpenAIRE transformer and writer adding PIC identifier
awards: added subjects and participating organizations from CORDIS datastreams
names: add permission check to names search

Version v5.1.0 (released 2024-09-25)

funders: tune search boost for acronyms
- Add and acronym.keyword field to the funders mapping.
- Apply to funders the same field boosting as in affiliations.

Version v5.0.3 (released 2024-09-06)

services: skip index rebuilding

Version v5.0.2 (released 2024-08-28)

ror: use datePublished as fallback date for dataset timestamp

Version v5.0.1 (released 2024-08-27)

mapping: fix normalizer

Version v5.0.0 (released 2024-08-22)

affiliations: dd analyzers and filters to improve results when searching affiliations

Version v4.4.0 (released 2024-08-09)

services: use and adjust vnd.inveniordm.v1+json http accept header

Version v4.3.0 (released 2024-08-05)

names: make names_exclude_regex configurable
names: validate entry full names
names: add orcid public data sync

Version v4.2.0 (released 2024-07-24)

ror: check last update; use ld+json for metadata (#367)
tasks: remove import funders task
funders: add and export custom transformer
affiliations: add and export custom transformer
datastreams: implement asynchronous writer

Version v4.1.1 (released 2024-07-15)

installation: use invenio-oaipmh-scythe from PyPI

Version v4.1.0 (released 2024-07-15)

readers: make OAI-PMH an optional extra
schema: add administration UI attributes
ror: fix duplicate acronymns and aliases
affiliations: fix title search
datastreams: have yaml writer output utf8
datastreams: add configs for funders and affiliations
affiliations: add datastreams
datastreams: move ror transformer to common
vocabulary-types: services, resources, and administration UI (#310)
config: add OpenAIRE mapping for "Latvian Council of Science"
funders: fix country name display (#343)
Initial implementation of OAIPMHReader (#329)
global: add "tags" field to all vocabularies

Version 4.0.0 (released 2024-06-04)

datastreams: implement factories for generating vocabulary configurations
datastreams: added ROR HTTP reader
funders: use ROR v2 dump instead of v1
datastreams: added celery task for funders using ROR HTTP reader
datastreams: add OpenAIRE Project HTTP Reader
datastreams: fix OpenAIRE graph dataset parsing
installation: upgrade invenio-records-resources

Version 3.4.0 (released 2024-04-19)

templates: add subject fields UI template (#303)

Version 3.3.0 (released 2024-04-16)

assets: add overridable awards and funding

Version 3.2.0 (released 2024-03-22)

funding: add country and ror to funder search results
init: move record_once to finalize_app (removes deprecation on before_first_request)
installation: upgrade invenio-app

Version 3.1.0 (released 2024-03-05)

custom_fields: added subject field
custom_fields: add pid_field to custom fields
mappings: change "dynamic" values to string
ci: upgrade tests matrix
bumps react-invenio-forms

Version 3.0.0 (released 2024-01-30)

installation: bump invenio-records-resources

Version 2.4.0 (2023-12-07)

schema: add validation for affiliations
mappings: add a text subfield for award acronyms
config: add new TWCF funder

Version 2.3.1 (2023-11-01)

contrib: add affiliation suggestion by id

Version 2.3.0 (2023-10-25)

contrib: allow search funders by id
contrib: funders and awards fix TransportError in OS caused by suggestion search in too many fields

Version 2.2.4 (2023-10-19)

search: decrease number of searching fields

Version 2.2.3 (2023-10-08)

contrib: fix name serialization for the Names vocabulary.

Version 2.2.2 (2023-10-06)

alembic rcp: set explicit dependency on pidstore create table

Version 2.2.1 (2023-10-02)

facets: change caching strategy by caching each vocabulary by id. Replace lru_cache with invenio-cache to ensure that cache expiration uses a TTL that is correctly computed.

Version 2.2.0 (2023-09-19)

facets: implement in-memory cache

Version 2.1.1 (2023-09-19)

funding: fixed accessiblity issues

Version 2.1.0 (2023-09-15)

custom_fields: allow to pass schema to the VocabularyCF
affiliations: add facet labels

Version 2.0.0 (2023-09-14)

contrib-awards: add "program" to schema fields
global: switch names and affiliations to model PID field
ci: update matrix
awards: add "program" field
config: update awards funders mapping
service: add sort option to load vocabs

Version 1.6.0 (2023-09-12)

awards: add acronym to schema

Version 1.5.1 (2023-07-07)

fix string type columns for mysql

Version 1.5.0 (2023-04-25)

upgrade invenio-records-resources

Version 1.4.0 (2023-04-20)

upgrade invenio-records-resources

Version 1.3.0 (2023-04-20)

add UI deposit contrib components

Version 1.2.0 (2023-03-24)

bump invenio-records-resources to v2.0.0

Version 1.1.0 (released 2023-03-02)

serializers: deprecate marshamllow JSON
mappings: add dynamic template for i18n titles and descriptions
remove deprecated flask-babelex dependency and imports

Version 1.0.4 (released 2023-01-20)

funders: Add ROR to identifiers for all funders in datastream
facets: add not found facet exception (when facet is configured but not provided in setup)
facets: handle non existing vocabulary type

Version 1.0.3 (released 2022-11-25)

Add i18n translations.

Version 1.0.2 (released 2022-11-14)

Fix missing field_args in VocabularyCF

Version 1.0.1 (released 2022-11-14)

Allow kwargs in VocabularyCF

Version 1.0.0 (released 2022-11-04)

Bump invenio-records-resources

Version 0.1.5 (released 2020-12-11)

Bug fixes in contrib vocabulary

Version 0.1.4 (released 2020-12-11)

Add subjects vocabulary

Version 0.1.3 (released 2020-12-11)

Include csv vocabularies data

Version 0.1.2 (released 2020-12-11)

CI changes

Version 0.1.1 (released 2020-12-11)

Add vocabulary import command

Version 0.1.0 (released 2020-12-08)

Initial public release.

FAQs

What is invenio-vocabularies?

Invenio module for managing vocabularies. Visit Snyk Advisor to see a full health score report for invenio-vocabularies, including popularity, security, maintenance & community analysis.

Is invenio-vocabularies popular?

The python package invenio-vocabularies receives a total of 5,530 weekly downloads. As such, invenio-vocabularies popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is invenio-vocabularies well maintained?

We found that invenio-vocabularies demonstrated a healthy version release cadence and project activity. It has a community of 40 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is invenio-vocabularies safe to use?

While scanning the latest version of invenio-vocabularies, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 22 December-2024, at 04:24 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

invenio-vocabularies

Invenio module for managing vocabularies. For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Popularity

Direct Usage Popularity

Security

Security and license risk for latest version

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

Invenio-Vocabularies

Changes

FAQs

What is invenio-vocabularies?

Is invenio-vocabularies popular?

Is invenio-vocabularies well maintained?

Is invenio-vocabularies safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

Invenio-Vocabularies

Changes

FAQs

What is invenio-vocabularies?

Is invenio-vocabularies popular?

Is invenio-vocabularies well maintained?

Is invenio-vocabularies safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues