{"ecosystem":"crates","ecosystem_label":"crates.io","indexed_repositories":7969,"inspected_repositories":7969,"monthly_downloads":35448866107,"median_score":67,"share_good_or_better":0.5402,"computed_at":"2026-10-16T10:52:24.152968Z","bands":[{"band":"exceptional","repositories":506,"monthly_downloads":7244878331},{"band":"excellent","repositories":1714,"monthly_downloads":9899434545},{"band":"good","repositories":2085,"monthly_downloads":7547385801},{"band":"moderate","repositories":1993,"monthly_downloads":4219161887},{"band":"weak","repositories":824,"monthly_downloads":2252235895},{"band":"at_risk","repositories":585,"monthly_downloads":3848057170},{"band":"critical","repositories":262,"monthly_downloads":437712478}],"histogram":[{"start":0,"count":0},{"start":5,"count":21},{"start":10,"count":65},{"start":15,"count":176},{"start":20,"count":123},{"start":25,"count":199},{"start":30,"count":263},{"start":35,"count":240},{"start":40,"count":259},{"start":45,"count":325},{"start":50,"count":603},{"start":55,"count":632},{"start":60,"count":758},{"start":65,"count":751},{"start":70,"count":562},{"start":75,"count":772},{"start":80,"count":818},{"start":85,"count":588},{"start":90,"count":561},{"start":95,"count":253}],"categories":[{"key":"vitality","name":"Vitality","median":72,"record_median":68,"repositories":7969},{"key":"community","name":"Community & Adoption","median":51,"record_median":45,"repositories":7969},{"key":"governance","name":"Sustainability & Governance","median":60,"record_median":58,"repositories":7969},{"key":"engineering","name":"Engineering Quality","median":70,"record_median":66,"repositories":7969},{"key":"security","name":"Security","median":52,"record_median":49,"repositories":7969},{"key":"ai_readiness","name":"AI Readiness","median":64,"record_median":56,"repositories":7969}],"practices":[{"key":"readme","label":"README","share":0.9433,"repositories":7969},{"key":"license","label":"License detected","share":0.9403,"repositories":7969},{"key":"ci","label":"CI workflows","share":0.9153,"repositories":7969},{"key":"tests","label":"Automated tests","share":0.7883,"repositories":7969},{"key":"linter","label":"Linter configuration","share":0.5526,"repositories":7969},{"key":"docs_dir","label":"Documentation directory","share":0.3679,"repositories":7969},{"key":"contributing","label":"Contributing guide","share":0.3205,"repositories":7969},{"key":"security_policy","label":"Security policy","share":0.1875,"repositories":7969},{"key":"code_of_conduct","label":"Code of conduct","share":0.1848,"repositories":7969},{"key":"agent_instructions","label":"AI agent instructions","share":0.2629,"repositories":7969},{"key":"bootstrap","label":"One-command bootstrap","share":0.2958,"repositories":7969},{"key":"llms_txt","label":"llms.txt","share":0.1203,"repositories":7969}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":4244,"median_score":75},{"key":"user","label":"Personal accounts","repositories":3725,"median_score":60}],"bus_factor":[{"bucket":"1","repositories":6369},{"bucket":"2","repositories":969},{"bucket":"3–5","repositories":504},{"bucket":"6+","repositories":114}],"single_maintainer_share":0.8005,"single_maintainer_high_reliance":969,"licenses":[{"license":"Apache-2.0","state":"standard","repositories":3163},{"license":"MIT","state":"standard","repositories":2733},{"license":null,"state":"custom","repositories":758},{"license":null,"state":"absent","repositories":476},{"license":"GPL-3.0","state":"standard","repositories":155},{"license":"MPL-2.0","state":"standard","repositories":153},{"license":"BSD-3-Clause","state":"standard","repositories":138},{"license":"AGPL-3.0","state":"standard","repositories":132},{"license":"Unlicense","state":"standard","repositories":56},{"license":"BSD-2-Clause","state":"standard","repositories":42}],"ecosystems":[],"top_repositories":[{"id":35183,"full_name":"mozilla/source-map","url":"https://github.com/mozilla/source-map","description":"Consume and generate source maps.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"JavaScript","languages":["JavaScript","Rust"],"topics":[],"license_spdx":null,"license_state":"custom","stars":3724,"forks":369,"watchers":68,"monthly_downloads":1351911442,"latest_score":75,"latest_band":"good","latest_scanned_at":"2026-09-16T08:21:01.689819Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/mozilla/source-map?v=d567163a-1","icon_source_type":"avatar","badge_url":""},{"id":124,"full_name":"tailwindlabs/tailwindcss","url":"https://github.com/tailwindlabs/tailwindcss","description":"A utility-first CSS framework for rapid UI development.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"TypeScript","languages":["TypeScript","Rust"],"topics":["tailwindcss","css","css-framework","postcss","functional-css","utility-classes","responsive"],"license_spdx":"MIT","license_state":"standard","stars":97572,"forks":5802,"watchers":750,"monthly_downloads":1068160854,"latest_score":93,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T13:51:02.287685Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/tailwindlabs/tailwindcss?v=3c2d43f8-1","icon_source_type":"avatar","badge_url":""},{"id":253,"full_name":"pydantic/pydantic","url":"https://github.com/pydantic/pydantic","description":"Data validation using Python type hints","ecosystem":"pypi","ecosystems":["pypi","crates"],"primary_language":"Python","languages":["Python","Rust"],"topics":["validation","parsing","json-schema","pydantic","python39","python","hints","python310","python311","python312","python313"],"license_spdx":"MIT","license_state":"standard","stars":28781,"forks":2952,"watchers":177,"monthly_downloads":848914727,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T18:20:42.695176Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pydantic/pydantic?v=956b0efb-1","icon_source_type":"homepage","badge_url":""},{"id":249,"full_name":"pnpm/pnpm","url":"https://github.com/pnpm/pnpm","description":"Fast, disk space efficient package manager","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"Rust","languages":["Rust","TypeScript"],"topics":["npm","dependency-manager","package-manager","node","nodejs","install","modules","javascript","pnpm","rust","pnpm11","tarball"],"license_spdx":"MIT","license_state":"standard","stars":36538,"forks":1730,"watchers":164,"monthly_downloads":662868502,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T17:04:16.304082Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pnpm/pnpm?v=97c0104f-1","icon_source_type":"homepage","badge_url":""},{"id":29548,"full_name":"parcel-bundler/lightningcss","url":"https://github.com/parcel-bundler/lightningcss","description":"An extremely fast CSS parser, transformer, bundler, and minifier written in Rust.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"Rust","languages":["Rust"],"topics":["css","parser","compiler","minifier","rust","build-tool","parcel","selectors"],"license_spdx":"MPL-2.0","license_state":"standard","stars":7676,"forks":301,"watchers":24,"monthly_downloads":538546225,"latest_score":84,"latest_band":"excellent","latest_scanned_at":"2026-09-16T09:58:36.688853Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/parcel-bundler/lightningcss?v=4b28631f-1","icon_source_type":"avatar","badge_url":""},{"id":10698,"full_name":"crate-py/rpds","url":"https://github.com/crate-py/rpds","description":"Python bindings to the Rust rpds crate for persistent data structures","ecosystem":"pypi","ecosystems":["pypi","crates"],"primary_language":"Rust","languages":["Rust","Python"],"topics":["persistent-data-structure","pyo3","pyo3-rust-bindings","python","rust","data-structures","persistent"],"license_spdx":"MIT","license_state":"standard","stars":64,"forks":30,"watchers":1,"monthly_downloads":536395640,"latest_score":90,"latest_band":"excellent","latest_scanned_at":"2026-09-09T06:24:28.714713Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/crate-py/rpds?v=de47a2a8-1","icon_source_type":"avatar","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":4952,"median":60,"p25":47,"p75":73},{"label":"100 – 999","repositories":1952,"median":75,"p25":62,"p75":86},{"label":"1,000 – 9,999","repositories":842,"median":87,"p25":78,"p75":93},{"label":"10,000 and more","repositories":223,"median":93,"p25":88,"p75":96}],"popularity_downloads":[{"label":"Under 10K / month","repositories":2650,"median":67,"p25":54,"p75":78},{"label":"10K – 1M","repositories":2481,"median":73,"p25":59,"p75":84},{"label":"1M – 100M","repositories":1288,"median":67,"p25":48,"p75":83},{"label":"100M and more","repositories":54,"median":84,"p25":76,"p75":92}],"freshness":[{"label":"Pushed within 30 days","repositories":5738},{"label":"31 – 90 days","repositories":1260},{"label":"91 – 365 days","repositories":425},{"label":"Over a year","repositories":546}],"median_days_since_push":4,"dependencies":{"basis":5828,"median_direct":11,"median_indirect":75,"median_total":85,"buckets":[{"label":"0","repositories":246},{"label":"1 – 5","repositories":710},{"label":"6 – 20","repositories":1063},{"label":"21 – 50","repositories":616},{"label":"51 – 200","repositories":909},{"label":"201 – 500","repositories":994},{"label":"501 – 1,000","repositories":649},{"label":"Over 1,000","repositories":641}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":7882,"inconclusive_share":0.0027},{"name":"Signed-Releases","mean":0.7,"measured":2444,"inconclusive_share":0.6908},{"name":"SAST","mean":1.1,"measured":7885,"inconclusive_share":0.0023},{"name":"Fuzzing","mean":1.3,"measured":7897,"inconclusive_share":0.0008},{"name":"Branch-Protection","mean":1.4,"measured":5786,"inconclusive_share":0.2679},{"name":"Pinned-Dependencies","mean":1.8,"measured":7259,"inconclusive_share":0.0815},{"name":"Token-Permissions","mean":1.8,"measured":7200,"inconclusive_share":0.089},{"name":"Security-Policy","mean":2.3,"measured":7903,"inconclusive_share":0.0},{"name":"Code-Review","mean":2.4,"measured":7896,"inconclusive_share":0.0009},{"name":"Dependency-Update-Tool","mean":4.3,"measured":7903,"inconclusive_share":0.0},{"name":"Maintained","mean":6.4,"measured":7903,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":6.5,"measured":7898,"inconclusive_share":0.0006},{"name":"Contributors","mean":6.6,"measured":7903,"inconclusive_share":0.0},{"name":"CI-Tests","mean":7.0,"measured":6640,"inconclusive_share":0.1598},{"name":"License","mean":9.3,"measured":7903,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":9.6,"measured":7903,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.7,"measured":7200,"inconclusive_share":0.089},{"name":"Packaging","mean":10.0,"measured":2708,"inconclusive_share":0.6573}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":529,"repositories":7969,"share":0.0664,"share_of_record":0.0664},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":75,"repositories":7375,"share":0.0102,"share_of_record":0.0094},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":7,"repositories":5219,"share":0.0013,"share_of_record":0.0009},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":121,"share":0.0083,"share_of_record":0.0001}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[55,366,476,402,475,767,1077,1512,1621,1218]},{"key":"community","name":"Community & Adoption","bins":[37,275,551,1241,1590,1670,1252,803,408,142]},{"key":"governance","name":"Sustainability & Governance","bins":[0,23,110,411,815,2356,2534,1179,474,67]},{"key":"engineering","name":"Engineering Quality","bins":[14,35,215,282,786,1037,1498,1962,1507,633]},{"key":"security","name":"Security","bins":[22,44,348,1021,1997,2240,1430,677,170,20]},{"key":"ai_readiness","name":"AI Readiness","bins":[0,0,27,437,1112,1611,1934,1355,1062,431]}],"downloads_top1pct_share":0.4777}