pallets/click

Can another program use it through a documented, machine-readable surface?

• next: L2 The public API is delimited (__all__, an exports map, exported identifiers). (no __all__/exports defining the public API)

library ladder · level 1

• ✓ L1 An importable, packaged API exists. pyproject.toml Python package click
• ✗ L2 The public API is delimited (__all__, an exports map, exported identifiers). no __all__/exports defining the public API
• ✓ L3 The public API is statically typed (py.typed, type declarations, a typed language). src/click/py.typed py.typed
• ✓ L4 An API reference is generated from the code (autodoc, mkdocstrings, typedoc, …). docs/conf.py 4 matches

Can integrators rely on it not changing under them?

all ladder · level 4

• ✓ L1 Releases are versioned (semver tags or versioned changelog sections). 64 semver tags, latest 8.5.0
• ✓ L2 A changelog exists and marks breaking changes. CHANGES.md marks breaking changes
• ✓ L3 A deprecation mechanism is used in code (warnings, @deprecated, Deprecation/Sunset headers) or the API is versioned. src/click/core.py 17 matchessrc/click/__init__.py 12 matches
• ✓ L4 Across tagged releases, no OpenAPI operation, CLI option or __all__ symbol was removed without first being deprecated. 20 tagged releases compared

Can others react to state changes without polling?

Can a machine act with its own revocable, least-privilege identity?

Can its data get in and out, in bulk, in open formats, with an explicit schema?

Can an automated caller use it without guessing, and recover from failure?

• next: L1 Errors are specific exception types, and library code never calls sys.exit. (library code exits the process: src/click/core.py)

library ladder · level 0

• ✗ L1 Errors are specific exception types, and library code never calls sys.exit. library code exits the process: src/click/core.py
• ✓ L2 Inputs are validated with messages naming the bad argument. src/click/core.py 15 matchessrc/click/_compat.py 6 matches
• ✗ L3 Timeouts and retries are configurable. no timeout parameter
• ✗ L4 Agent docs, and examples that run as tests (doctests). no agent docs

Can another system run and compose it without a human?

• next: L4 Optional features behind extras/features. (no optional extras)

library ladder · level 3

• ✓ L1 Importable from source. pyproject.toml Python package click
• ✓ L2 Installable as a package (a package manifest). pyproject.toml package manifest
• ✓ L3 Published to a public registry, with at most 10 runtime dependencies. .github/workflows/publish.yaml 1 match 1 runtime dependencies
• ✗ L4 Optional features behind extras/features. no optional extras

Can behaviour be added without modifying the code?

• next: L1 Internal seams: a registry, registration function or plugin manager. (no registry or registration function)

all ladder · level 0

• ✗ L1 Internal seams: a registry, registration function or plugin manager. no registry or registration function
• ✗ L2 The docs show how to add behaviour through those seams (even in-tree). no registration functions to document
• ✗ L3 Out-of-tree extensions are discovered (entry points, a plugin directory, configuration) without editing the package. extensions must be added inside the package
• ✗ L4 The extension API is versioned, has lifecycle hooks, and has example extensions. the extension API isn't versioned

Can an operator, or an orchestrating agent, tell whether it works and why not?

• next: L1 Logs through a standard logger namespace and never prints from library code. (no standard logger)

library ladder · level 0

• ✗ L1 Logs through a standard logger namespace and never prints from library code. no standard logger
• ✗ L2 Log levels are used meaningfully (at least two levels). fewer than two log levels used
• ✗ L3 Optional metrics or tracing hooks. no metrics or tracing hooks
• ✗ L4 OpenTelemetry instrumentation available. no OpenTelemetry instrumentation

Can an agent change it safely with limited context?

• next: L3 At least 90% of modules fit 32k tokens and no file exceeds 12k; test/source token ratio at least 0.3; at least 70% of the code is typed. (50% of modules fit 32k tokens; 1 files over 12k)

all ladder · level 2

• ✓ L1 A README and some tests. README.mdtests/conftest.py 59 test files
• ✓ L2 CI runs the tests; applications pin dependencies (libraries and zero-dependency projects are exempt). .github/workflows/lock.yaml.github/workflows/nightly.yaml
• ✗ L3 At least 90% of modules fit 32k tokens and no file exceeds 12k; test/source token ratio at least 0.3; at least 70% of the code is typed. 50% of modules fit 32k tokens; 1 files over 12k
• ✗ L4 No import cycles, and agent docs (AGENTS.md, CLAUDE.md, llms.txt). 1 import cycles (largest: src/click/_compat.py, src/click/_winconsole.py, src/click/exceptions.py)