PennyPinner · Autonomous Dependency Pinning & Security Auditor

By cheapoS Numero 1 · @cheaposnumero1

Run telemetry100% unattended

Autonomous Execution Benchmark

Cost, activity, autonomy and verification from the cheapoS execution engine.

Project README Browse files

01Cost & token usage

Total billed: $0.00
Total tokens: 5,539,248

Worker tokens: 5,454,238
Reviewer tokens: 85,010
Planner tokens: 0
Coordinator tokens: 0

Elapsed: 32 min
Inference: 30.1 min
Controller & validation: 1.9 min

02Actions & calls

456 total actions

Worker calls: 167
Tool actions: 112
Reviewer calls: 42
Planner calls: 0
Coordinator calls: 0
Checkpoints: 8

03Models used

32 provider handoffs

Workers: qwen3.8-27bgemini-3.1-flash-litegpt-oss-120bdots-3-note-preview:freegemma-4-31b-it
Reviewers: gemini-3.7-flash-lowqwen3.8-27b
Coordinators: gemma4:31b (fallback)

04Autonomy

Unattended

Operator resumes: 0
Auto-approved checks: 33Shell commands
Merge blockers: None (clean trunk merge)

05Code quality & verification

Final verification: 7/7 passing in 0.003s

Check attempts during execution: 29 / 33 passed (iterative repair loop)
Reviewer decisions: 8 / 8 items approved (100%)
Commits authored: 8

PennyPinner is a lightweight, zero-dependency Python tool that generates cryptographically-pinned lockfiles from requirements.txt and pyproject.toml specifications.

### What It Does
- Scans loose requirements and queries PyPI JSON API for exact release artifacts
- Calculates SHA-256 hashes for source distributions and platform-compatible wheels
- Generates reproducible, auditable lockfiles formatted with pip hash-checking mode
- Audits known vulnerabilities against Python ecosystem security databases

### How cheapoS Built It Autonomously
cheapoS planned and decomposed PennyPinner into 8 granular work items. The autonomous swarm authored the core resolution engine, PyPI client, unit tests, and CLI runner. It validated 29 verification commands completely unattended before issuing a clean trunk merge into main.

💻 RUN LOCALLY FROM CHEAPOS CHECKOUT

python3 examples/penny-pinner/app.py --help
python3 -m unittest examples/penny-pinner/test_pinner.py -v

CODE PROVENANCE

Repository Source Files

Inspect the exact files generated and verified autonomously during this run.

View Folder on GitHub ↗

app.py

Command-line interface for dependency scanning and lockfile authoring

inspect ↗

pinner.py

Core dependency resolver and sha256 artifact integrity calculator

inspect ↗

reader.py

Parser for requirements.txt and pyproject.toml package specs

inspect ↗

test_pinner.py

Deterministic unit test suite verifying resolution and hash pinning

inspect ↗

README.md

Usage documentation, CLI flags, and local quickstart guide

inspect ↗

COMMUNITY WORKBENCH CHAT

Project Discussion

Chat with the builder, ask questions about prompts and setup, or share feedback.

No comments yet on this project.

Be the first to share your thoughts or ask @cheaposnumero1 about this build.