pypi:quantstats@0.0.86
PyPI · checked 21 Oct 2026, 23:14 UTC · checker 2026-10-19.2 · log index 933
Record issued 21 Oct 2026
Issued 21 Oct 2026, 23:14 UTC · pypi:quantstats@0.0.86
unfinished
The check could not finish. This is not a pass.
The check could not finish (import_failed), so this is not a pass.
The trace shows what a step attempted. A quiet trace is evidence, not proof.
An unfinished check is not a pass. Nothing here says the package is quiet.
Phases
This record does not state its phases one by one; npm records from checker 2026-11-03.1 and Python records from 2026-11-04.3 on do.
Install steps
pypi:quantstats has no install step of its own.
No dependency runs anything at install.
What the run reached
No install step reached anything we watch.
- Programs
- python3
- Credentials read
- No credential file or variable was opened.
- Credentials sent
- No decoy left the box.
- Looked for
- fc-list
First import
No first import was recorded for this check.
Dependencies
34 of 34 installed, as npm would on linux x64 musl.
Show all 34
- matplotlib==3.11.2
- numpy==2.5.4
- pandas==3.0.6
- python-dateutil==2.9.0.post0
- scipy==1.18.1
- seaborn==0.13.2
- tabulate==0.10.0
- yfinance==1.7.0
- contourpy==1.4.0
- cycler==0.12.1
- fonttools==4.67.0
- kiwisolver==1.5.1
- packaging==26.3
- pillow==13.0.0
- pyparsing==3.3.3
- six==1.17.0
- beautifulsoup4==4.15.0
- curl-cffi==0.16.3
- lxml==6.1.3
- multitasking==0.0.13
- peewee==4.5.3
- platformdirs==4.13.5
- protobuf==7.36.2
- pytz==2026.5
- requests==2.34.2
- websockets==17.3
- soupsieve==3.0.3
- typing-extensions==4.16.0
- cffi==2.1.1
- certifi==2026.10.19
- charset-normalizer==3.5.2
- idna==3.20
- urllib3==2.8.0
- pycparser==3.11
Since the previous version
No comparison with an earlier version was made for this check.
Sandbox
network=none; capabilities=all-dropped; rootfs=read-only; user=nobody; harness=separate-user
Signature and transparency log
- level
- unfinished
- verdict
- manual_review
- reasonCode
- import_failed
- keyId
- 322a2536e0d5ec8e
- algorithm
- ed25519
- checker
- 2026-10-19.2
- issuedAt
- 2026-10-21T23:14:26Z
- contentSha256
- 4cfb157c8228cbb47681d6a81767d465fbc2bdf529643dd7e836479d2165efd6
- contentSizeBytes
- 96762 (94 KB)
- outputSha256
- 4268970f4a05813af0167529e01cad2df923396550ac96a2a58831e460362c74
- log index
- 933
Verify the signature yourself, in your browser, at /verify. Kenwea is not in that loop.
Inclusion proofCheckpointKey list
Issued 21 Oct 2026, 23:14 UTC
What this does and does not say
The claim is about the bytes, not the name.
The signature covers these exact bytes. Another version is another check.
A quiet trace is evidence, not proof.
Code that only runs later, when your app calls it, is out of reach.
A signature is not an endorsement.
It says what happened, not that the code is good.
Twenty checks an hour for each network address. When a limit is ours, the record says unfinished and names it.