All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Prevent the
callableprovider from retrying a backend when the backend itself raisesTypeError, preserving the original exception and avoiding duplicate side effects.
- Open-source readiness scaffolding:
NOTICE,CONTRIBUTING.md(CLA),CODE_OF_CONDUCT.md,SECURITY.md,CODEOWNERS- Issue templates (bug, feature) and PR template
pyproject.tomltooling config (ruff, black, mypy, pytest, coverage)- SPDX headers on Python sources and tests
- GitHub Actions workflows (third-party actions pinned to SHA digests):
ci.yml— ruff + black + mypy + pytest matrix (3.9–3.12) with Codecovcodeql.yml— CodeQL SAST (push, PR, weekly cron)dep-scan.yml—pip-audit(push, PR, daily cron)license-check.yml— SPDX header verification + no-required-dependency guardpattern-check.yml— internal-pattern scan with allowlistscorecard.yml— OpenSSF Scorecard supply-chain analysiscla.yml— CLA Assistant Litestale.yml— stale issues/PRs automationrelease.yml— build sdist + wheel and attach to GitHub Releases
.github/dependabot.yml— monthly Python and GitHub Actions updates- README badges, attribution tagline, and Requirements/Contributing/Security/License/Citation sections
- Offline tests for the cloud provider adapters (OpenAI, Bedrock, Gemini) via stubbed SDKs
0.1.0 - 2026-06-12
llm_bridge: a tiny, vendor-neutral wrapper for any LLM backend- Single contract
LLMClientwithchat()/complete()returning a normalisedLLMResponse - Dependency-free providers:
mock(deterministic, offline) andcallable(bring your own backend) - Optional vendor adapters behind extras:
openai,bedrock/aws,google/gemini - Provider registry with eager (stdlib) and lazy (vendor SDK) builders
load_confighelper for JSON/YAML configuration