{"ecosystem":null,"ecosystem_label":null,"indexed_repositories":35514,"inspected_repositories":34071,"monthly_downloads":378244630928,"median_score":57,"share_good_or_better":0.1906,"computed_at":"2026-07-23T05:46:08.094898Z","bands":[{"band":"excellent","repositories":516,"monthly_downloads":19014807571},{"band":"good","repositories":5979,"monthly_downloads":66626214858},{"band":"moderate","repositories":16564,"monthly_downloads":132027618590},{"band":"at_risk","repositories":9025,"monthly_downloads":120966242753},{"band":"critical","repositories":1987,"monthly_downloads":39609747156}],"histogram":[{"start":0,"count":2},{"start":5,"count":89},{"start":10,"count":184},{"start":15,"count":309},{"start":20,"count":536},{"start":25,"count":867},{"start":30,"count":1457},{"start":35,"count":1893},{"start":40,"count":2427},{"start":45,"count":3248},{"start":50,"count":3818},{"start":55,"count":4359},{"start":60,"count":4305},{"start":65,"count":4082},{"start":70,"count":2915},{"start":75,"count":1906},{"start":80,"count":1158},{"start":85,"count":461},{"start":90,"count":52},{"start":95,"count":3}],"categories":[{"key":"vitality","name":"Vitality","median":73,"record_median":null,"repositories":34074},{"key":"community","name":"Community & Adoption","median":46,"record_median":null,"repositories":34074},{"key":"governance","name":"Sustainability & Governance","median":59,"record_median":null,"repositories":34074},{"key":"engineering","name":"Engineering Quality","median":66,"record_median":null,"repositories":34074},{"key":"security","name":"Security","median":45,"record_median":null,"repositories":34074},{"key":"ai_readiness","name":"AI Readiness","median":46,"record_median":null,"repositories":34074}],"practices":[{"key":"readme","label":"README","share":0.9482,"repositories":34071},{"key":"license","label":"License detected","share":0.9065,"repositories":34071},{"key":"ci","label":"CI workflows","share":0.8207,"repositories":34071},{"key":"tests","label":"Automated tests","share":0.8695,"repositories":34071},{"key":"linter","label":"Linter configuration","share":0.4148,"repositories":34071},{"key":"docs_dir","label":"Documentation directory","share":0.4004,"repositories":34071},{"key":"contributing","label":"Contributing guide","share":0.3863,"repositories":34071},{"key":"security_policy","label":"Security policy","share":0.2074,"repositories":34071},{"key":"code_of_conduct","label":"Code of conduct","share":0.254,"repositories":34071},{"key":"agent_instructions","label":"AI agent instructions","share":0.258,"repositories":34071},{"key":"bootstrap","label":"One-command bootstrap","share":0.3023,"repositories":34071},{"key":"llms_txt","label":"llms.txt","share":0.0187,"repositories":34071}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":20483,"median_score":61},{"key":"user","label":"Personal accounts","repositories":13588,"median_score":52}],"bus_factor":[{"bucket":"1","repositories":24629},{"bucket":"2","repositories":5663},{"bucket":"3–5","repositories":2959},{"bucket":"6+","repositories":580}],"single_maintainer_share":0.728,"single_maintainer_high_reliance":1772,"licenses":[{"license":"MIT","state":"standard","repositories":16116},{"license":"Apache-2.0","state":"standard","repositories":6980},{"license":null,"state":"custom","repositories":3494},{"license":null,"state":"absent","repositories":3185},{"license":"BSD-3-Clause","state":"standard","repositories":1071},{"license":"GPL-3.0","state":"standard","repositories":867},{"license":"AGPL-3.0","state":"standard","repositories":647},{"license":"MPL-2.0","state":"standard","repositories":335},{"license":"GPL-2.0","state":"standard","repositories":330},{"license":"BSD-2-Clause","state":"standard","repositories":288}],"ecosystems":[{"key":"npm","label":"npm","repositories":10718,"median_score":60,"monthly_downloads":319819703734,"share_good_or_better":0.2572,"bands":{"good":2530,"at_risk":2133,"critical":444,"moderate":5384,"excellent":227}},{"key":"go","label":"Go","repositories":10117,"median_score":53,"monthly_downloads":1181879277,"share_good_or_better":0.1402,"bands":{"good":1284,"at_risk":3463,"critical":526,"moderate":4710,"excellent":134}},{"key":"pypi","label":"PyPI","repositories":5271,"median_score":62,"monthly_downloads":51613121677,"share_good_or_better":0.3235,"bands":{"good":1491,"at_risk":913,"critical":228,"moderate":2425,"excellent":214}},{"key":"packagist","label":"Packagist","repositories":3161,"median_score":58,"monthly_downloads":3905082798,"share_good_or_better":0.1645,"bands":{"good":505,"at_risk":775,"critical":126,"moderate":1740,"excellent":15}},{"key":"crates","label":"crates.io","repositories":2471,"median_score":62,"monthly_downloads":12456000948,"share_good_or_better":0.2671,"bands":{"good":611,"at_risk":362,"critical":72,"moderate":1377,"excellent":49}},{"key":"rubygems","label":"RubyGems","repositories":2112,"median_score":56,"monthly_downloads":459506022,"share_good_or_better":0.1903,"bands":{"good":372,"at_risk":575,"critical":174,"moderate":961,"excellent":30}},{"key":"hex","label":"Hex","repositories":1096,"median_score":51,"monthly_downloads":253372778,"share_good_or_better":0.0657,"bands":{"good":71,"at_risk":451,"critical":45,"moderate":528,"excellent":1}},{"key":"maven","label":"Maven","repositories":874,"median_score":65,"monthly_downloads":517577936,"share_good_or_better":0.365,"bands":{"good":286,"at_risk":141,"critical":59,"moderate":355,"excellent":33}},{"key":"nuget","label":"NuGet","repositories":566,"median_score":56,"monthly_downloads":6014293,"share_good_or_better":0.129,"bands":{"good":73,"at_risk":159,"critical":47,"moderate":287,"excellent":0}}],"top_repositories":[{"id":35121,"full_name":"chalk/ansi-regex","url":"https://github.com/chalk/ansi-regex","description":"Regular expression for matching ANSI escape codes","ecosystem":"npm","ecosystems":["npm"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["ansi","styles","color","colour","colors","terminal","console","cli","string","tty","escape","formatting","rgb","256","shell","xterm","command-line","text","regex","regexp","re","match","test","find","pattern"],"license_spdx":"MIT","license_state":"standard","stars":202,"forks":91,"watchers":14,"monthly_downloads":2124647308,"latest_score":49,"latest_band":"at_risk","latest_scanned_at":"2026-07-22T15:44:02.935162Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"badge_url":""},{"id":35113,"full_name":"vercel/ms","url":"https://github.com/vercel/ms","description":"Tiny millisecond conversion utility","ecosystem":"npm","ecosystems":["npm"],"primary_language":"TypeScript","languages":["TypeScript"],"topics":["milliseconds","conversion","utility"],"license_spdx":"MIT","license_state":"standard","stars":5541,"forks":329,"watchers":78,"monthly_downloads":2081725518,"latest_score":66,"latest_band":"moderate","latest_scanned_at":"2026-07-22T15:42:03.079717Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"badge_url":""},{"id":10000,"full_name":"pypa/packaging","url":"https://github.com/pypa/packaging","description":"Core utilities for Python packages","ecosystem":"pypi","ecosystems":["pypi"],"primary_language":"Python","languages":["Python"],"topics":[],"license_spdx":null,"license_state":"custom","stars":745,"forks":311,"watchers":26,"monthly_downloads":2071271712,"latest_score":89,"latest_band":"excellent","latest_scanned_at":"2026-07-16T12:12:52.923800Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":[],"badge_url":""},{"id":12366,"full_name":"isaacs/node-lru-cache","url":"https://github.com/isaacs/node-lru-cache","description":"A fast cache that automatically deletes the least recently used items","ecosystem":"npm","ecosystems":["npm"],"primary_language":"JavaScript","languages":["JavaScript","TypeScript"],"topics":["cache","caching","lru","lru-cache","lrucache","mru"],"license_spdx":"BlueOak-1.0.0","license_state":"standard","stars":5902,"forks":368,"watchers":47,"monthly_downloads":2054766239,"latest_score":68,"latest_band":"moderate","latest_scanned_at":"2026-07-22T01:30:22.945601Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"badge_url":""},{"id":12474,"full_name":"sindresorhus/string-width","url":"https://github.com/sindresorhus/string-width","description":"Get the visual width of a string - the number of columns required to display it","ecosystem":"npm","ecosystems":["npm"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["string","character","unicode","width","visual","column","columns","fullwidth","full-width","wcwidth","wcswidth","full","ansi","escape","codes","cli","command-line","terminal","console","cjk","chinese","japanese","korean","fixed-width","east-asian-width"],"license_spdx":"MIT","license_state":"standard","stars":529,"forks":45,"watchers":10,"monthly_downloads":2032163617,"latest_score":60,"latest_band":"moderate","latest_scanned_at":"2026-07-17T04:50:39.771803Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":[],"badge_url":""},{"id":35152,"full_name":"chalk/supports-color","url":"https://github.com/chalk/supports-color","description":"Detect whether a terminal supports color","ecosystem":"npm","ecosystems":["npm"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["color","colour","colors","terminal","console","cli","ansi","styles","tty","rgb","256","shell","xterm","command-line","support","supports","capability","detect","truecolor","16m"],"license_spdx":"MIT","license_state":"standard","stars":370,"forks":94,"watchers":11,"monthly_downloads":1917989391,"latest_score":49,"latest_band":"at_risk","latest_scanned_at":"2026-07-22T15:53:19.848790Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"dormant","red_flags":[],"badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":22417,"median":53,"p25":43,"p75":62},{"label":"100 – 999","repositories":6781,"median":63,"p25":51,"p75":71},{"label":"1,000 – 9,999","repositories":3671,"median":70,"p25":61,"p75":77},{"label":"10,000 and more","repositories":1202,"median":78,"p25":70,"p75":84}],"popularity_downloads":[{"label":"Under 10K / month","repositories":7974,"median":55,"p25":46,"p75":63},{"label":"10K – 1M","repositories":4641,"median":62,"p25":52,"p75":70},{"label":"1M – 100M","repositories":1958,"median":67,"p25":55,"p75":76},{"label":"100M and more","repositories":806,"median":51,"p25":39,"p75":66}],"freshness":[{"label":"Pushed within 30 days","repositories":27985},{"label":"31 – 90 days","repositories":1320},{"label":"91 – 365 days","repositories":2081},{"label":"Over a year","repositories":2685}],"median_days_since_push":2,"dependencies":{"basis":23268,"median_direct":3,"median_indirect":20,"median_total":27,"buckets":[{"label":"0","repositories":2720},{"label":"1 – 5","repositories":3116},{"label":"6 – 20","repositories":5017},{"label":"21 – 50","repositories":2567},{"label":"51 – 200","repositories":3549},{"label":"201 – 500","repositories":2232},{"label":"501 – 1,000","repositories":1823},{"label":"Over 1,000","repositories":2244}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":33652,"inconclusive_share":0.0015},{"name":"Fuzzing","mean":0.6,"measured":33692,"inconclusive_share":0.0003},{"name":"Signed-Releases","mean":0.9,"measured":8566,"inconclusive_share":0.7458},{"name":"Branch-Protection","mean":1.3,"measured":25190,"inconclusive_share":0.2525},{"name":"Pinned-Dependencies","mean":1.7,"measured":26555,"inconclusive_share":0.212},{"name":"SAST","mean":1.7,"measured":33678,"inconclusive_share":0.0007},{"name":"Token-Permissions","mean":1.7,"measured":25926,"inconclusive_share":0.2307},{"name":"Code-Review","mean":2.3,"measured":32969,"inconclusive_share":0.0217},{"name":"Security-Policy","mean":2.8,"measured":33701,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":4.3,"measured":33701,"inconclusive_share":0.0},{"name":"Maintained","mean":5.8,"measured":33701,"inconclusive_share":0.0},{"name":"Contributors","mean":6.2,"measured":33700,"inconclusive_share":0.0},{"name":"CI-Tests","mean":6.6,"measured":25525,"inconclusive_share":0.2426},{"name":"Vulnerabilities","mean":6.6,"measured":33673,"inconclusive_share":0.0008},{"name":"License","mean":9.0,"measured":33700,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.7,"measured":25926,"inconclusive_share":0.2307},{"name":"Binary-Artifacts","mean":9.8,"measured":33700,"inconclusive_share":0.0},{"name":"Packaging","mean":10.0,"measured":9524,"inconclusive_share":0.7174}],"red_flags":[{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":1191,"repositories":30193,"share":0.0394,"share_of_record":0.035},{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":933,"repositories":34076,"share":0.0274,"share_of_record":0.0274},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":25,"repositories":1792,"share":0.014,"share_of_record":0.0007},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":10,"repositories":5058,"share":0.002,"share_of_record":0.0003}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[352,1709,1893,1717,1729,2532,4703,6451,6314,6674]},{"key":"community","name":"Community & Adoption","bins":[320,2079,4997,5201,6187,4813,4114,3206,2062,1095]},{"key":"governance","name":"Sustainability & Governance","bins":[8,408,816,3269,4120,9267,8832,5256,2032,66]},{"key":"engineering","name":"Engineering Quality","bins":[190,427,1256,2762,3272,4878,7526,7020,4824,1919]},{"key":"security","name":"Security","bins":[229,811,4013,7644,7707,6679,4609,1856,465,61]},{"key":"ai_readiness","name":"AI Readiness","bins":[367,1315,4226,6286,7337,5616,3344,3613,1766,204]}],"downloads_top1pct_share":0.6415}