{"ecosystem":"crates","ecosystem_label":"crates.io","indexed_repositories":5909,"inspected_repositories":5908,"monthly_downloads":29507080457,"median_score":67,"share_good_or_better":0.535,"computed_at":"2026-09-08T00:09:47.315224Z","bands":[{"band":"exceptional","repositories":404,"monthly_downloads":5443267617},{"band":"excellent","repositories":1247,"monthly_downloads":7729278197},{"band":"good","repositories":1510,"monthly_downloads":6883102796},{"band":"moderate","repositories":1523,"monthly_downloads":3696300060},{"band":"weak","repositories":622,"monthly_downloads":1930142396},{"band":"at_risk","repositories":430,"monthly_downloads":3433912244},{"band":"critical","repositories":172,"monthly_downloads":391077147}],"histogram":[{"start":0,"count":0},{"start":5,"count":10},{"start":10,"count":37},{"start":15,"count":125},{"start":20,"count":93},{"start":25,"count":143},{"start":30,"count":194},{"start":35,"count":184},{"start":40,"count":192},{"start":45,"count":246},{"start":50,"count":476},{"start":55,"count":508},{"start":60,"count":539},{"start":65,"count":571},{"start":70,"count":390},{"start":75,"count":549},{"start":80,"count":551},{"start":85,"count":464},{"start":90,"count":427},{"start":95,"count":209}],"categories":[{"key":"vitality","name":"Vitality","median":73,"record_median":71,"repositories":5908},{"key":"community","name":"Community & Adoption","median":53,"record_median":45,"repositories":5908},{"key":"governance","name":"Sustainability & Governance","median":62,"record_median":59,"repositories":5908},{"key":"engineering","name":"Engineering Quality","median":67,"record_median":65,"repositories":5908},{"key":"security","name":"Security","median":51,"record_median":47,"repositories":5908},{"key":"ai_readiness","name":"AI Readiness","median":60,"record_median":53,"repositories":5908}],"practices":[{"key":"readme","label":"README","share":0.9492,"repositories":5908},{"key":"license","label":"License detected","share":0.9399,"repositories":5908},{"key":"ci","label":"CI workflows","share":0.9176,"repositories":5908},{"key":"tests","label":"Automated tests","share":0.7818,"repositories":5908},{"key":"linter","label":"Linter configuration","share":0.3067,"repositories":5908},{"key":"docs_dir","label":"Documentation directory","share":0.358,"repositories":5908},{"key":"contributing","label":"Contributing guide","share":0.3184,"repositories":5908},{"key":"security_policy","label":"Security policy","share":0.1816,"repositories":5908},{"key":"code_of_conduct","label":"Code of conduct","share":0.1813,"repositories":5908},{"key":"agent_instructions","label":"AI agent instructions","share":0.2512,"repositories":5908},{"key":"bootstrap","label":"One-command bootstrap","share":0.2921,"repositories":5908},{"key":"llms_txt","label":"llms.txt","share":0.0493,"repositories":5908}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":3156,"median_score":75},{"key":"user","label":"Personal accounts","repositories":2752,"median_score":59}],"bus_factor":[{"bucket":"1","repositories":4637},{"bucket":"2","repositories":755},{"bucket":"3–5","repositories":419},{"bucket":"6+","repositories":88}],"single_maintainer_share":0.7861,"single_maintainer_high_reliance":806,"licenses":[{"license":"Apache-2.0","state":"standard","repositories":2372},{"license":"MIT","state":"standard","repositories":2005},{"license":null,"state":"custom","repositories":575},{"license":null,"state":"absent","repositories":355},{"license":"GPL-3.0","state":"standard","repositories":112},{"license":"MPL-2.0","state":"standard","repositories":111},{"license":"BSD-3-Clause","state":"standard","repositories":102},{"license":"AGPL-3.0","state":"standard","repositories":94},{"license":"Unlicense","state":"standard","repositories":40},{"license":"BSD-2-Clause","state":"standard","repositories":30}],"ecosystems":[],"top_repositories":[{"id":35183,"full_name":"mozilla/source-map","url":"https://github.com/mozilla/source-map","description":"Consume and generate source maps.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"JavaScript","languages":["JavaScript","Rust"],"topics":[],"license_spdx":null,"license_state":"custom","stars":3724,"forks":369,"watchers":68,"monthly_downloads":1360387566,"latest_score":77,"latest_band":"good","latest_scanned_at":"2026-08-04T17:35:51.075972Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"","icon_source_type":null,"badge_url":""},{"id":124,"full_name":"tailwindlabs/tailwindcss","url":"https://github.com/tailwindlabs/tailwindcss","description":"A utility-first CSS framework for rapid UI development.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"TypeScript","languages":["TypeScript","Rust"],"topics":["tailwindcss","css","css-framework","postcss","functional-css","utility-classes","responsive"],"license_spdx":"MIT","license_state":"standard","stars":96440,"forks":5533,"watchers":759,"monthly_downloads":1051702991,"latest_score":94,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T22:26:51.091782Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/tailwindlabs/tailwindcss?v=3c2d43f8-1","icon_source_type":"avatar","badge_url":""},{"id":249,"full_name":"pnpm/pnpm","url":"https://github.com/pnpm/pnpm","description":"Fast, disk space efficient package manager","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"Rust","languages":["Rust","TypeScript"],"topics":["npm","dependency-manager","package-manager","node","nodejs","install","modules","javascript","pnpm","pnpm11","dependencies","efficient","fast","hardlinks","installer","link","lockfile","monorepo","multi-package","package.json","packages","prune","rapid","remove","shrinkwrap","symlinks","uninstall","workspace","tarball"],"license_spdx":"MIT","license_state":"standard","stars":35965,"forks":1616,"watchers":153,"monthly_downloads":580605930,"latest_score":95,"latest_band":"exceptional","latest_scanned_at":"2026-08-05T01:13:45.921051Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pnpm/pnpm?v=97c0104f-1","icon_source_type":"homepage","badge_url":""},{"id":36049,"full_name":"rollup/rollup","url":"https://github.com/rollup/rollup","description":"Next-generation ES module bundler","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"JavaScript","languages":["JavaScript","TypeScript"],"topics":["modules","bundler","bundling","es6","optimizer","browser"],"license_spdx":null,"license_state":"custom","stars":26303,"forks":1762,"watchers":249,"monthly_downloads":527987042,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T18:20:14.520182Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"","icon_source_type":null,"badge_url":""},{"id":10808,"full_name":"pydantic/jiter","url":"https://github.com/pydantic/jiter","description":"Fast iterable JSON parser.","ecosystem":"pypi","ecosystems":["pypi","crates"],"primary_language":"Rust","languages":["Rust"],"topics":["json","json-parser","pydantic","rust","deserialization","iter","parsing","parser-implementations"],"license_spdx":"MIT","license_state":"standard","stars":545,"forks":66,"watchers":6,"monthly_downloads":426490039,"latest_score":88,"latest_band":"excellent","latest_scanned_at":"2026-08-29T14:50:26.867522Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pydantic/jiter?v=ae4721f5-1","icon_source_type":"avatar","badge_url":""},{"id":29548,"full_name":"parcel-bundler/lightningcss","url":"https://github.com/parcel-bundler/lightningcss","description":"An extremely fast CSS parser, transformer, bundler, and minifier written in Rust.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"Rust","languages":["Rust"],"topics":["css","parser","compiler","minifier","rust","build-tool","parcel","selectors"],"license_spdx":"MPL-2.0","license_state":"standard","stars":7642,"forks":289,"watchers":23,"monthly_downloads":425107871,"latest_score":83,"latest_band":"excellent","latest_scanned_at":"2026-08-04T19:06:22.822523Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/parcel-bundler/lightningcss?v=4b28631f-1","icon_source_type":"avatar","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":3423,"median":59,"p25":45,"p75":71},{"label":"100 – 999","repositories":1574,"median":73,"p25":62,"p75":84},{"label":"1,000 – 9,999","repositories":713,"median":87,"p25":78,"p75":92},{"label":"10,000 and more","repositories":198,"median":94,"p25":88,"p75":97}],"popularity_downloads":[{"label":"Under 10K / month","repositories":1835,"median":65,"p25":54,"p75":77},{"label":"10K – 1M","repositories":1749,"median":73,"p25":59,"p75":84},{"label":"1M – 100M","repositories":1094,"median":65,"p25":47,"p75":83},{"label":"100M and more","repositories":40,"median":86,"p25":72,"p75":91}],"freshness":[{"label":"Pushed within 30 days","repositories":4705},{"label":"31 – 90 days","repositories":447},{"label":"91 – 365 days","repositories":358},{"label":"Over a year","repositories":398}],"median_days_since_push":2,"dependencies":{"basis":4451,"median_direct":11,"median_indirect":74,"median_total":83,"buckets":[{"label":"0","repositories":187},{"label":"1 – 5","repositories":543},{"label":"6 – 20","repositories":827},{"label":"21 – 50","repositories":475},{"label":"51 – 200","repositories":679},{"label":"201 – 500","repositories":745},{"label":"501 – 1,000","repositories":486},{"label":"Over 1,000","repositories":509}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":5861,"inconclusive_share":0.0009},{"name":"Signed-Releases","mean":0.7,"measured":1782,"inconclusive_share":0.6962},{"name":"SAST","mean":1.1,"measured":5856,"inconclusive_share":0.0017},{"name":"Fuzzing","mean":1.3,"measured":5864,"inconclusive_share":0.0003},{"name":"Branch-Protection","mean":1.4,"measured":4213,"inconclusive_share":0.2818},{"name":"Pinned-Dependencies","mean":1.6,"measured":5400,"inconclusive_share":0.0794},{"name":"Token-Permissions","mean":1.6,"measured":5358,"inconclusive_share":0.0866},{"name":"Security-Policy","mean":2.3,"measured":5866,"inconclusive_share":0.0},{"name":"Code-Review","mean":2.6,"measured":5860,"inconclusive_share":0.001},{"name":"Dependency-Update-Tool","mean":4.3,"measured":5866,"inconclusive_share":0.0},{"name":"Maintained","mean":6.3,"measured":5866,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":6.5,"measured":5862,"inconclusive_share":0.0007},{"name":"Contributors","mean":6.7,"measured":5866,"inconclusive_share":0.0},{"name":"CI-Tests","mean":7.0,"measured":4943,"inconclusive_share":0.1573},{"name":"License","mean":9.3,"measured":5866,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":9.6,"measured":5865,"inconclusive_share":0.0002},{"name":"Dangerous-Workflow","mean":9.8,"measured":5358,"inconclusive_share":0.0866},{"name":"Packaging","mean":10.0,"measured":1945,"inconclusive_share":0.6684}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":350,"repositories":5909,"share":0.0592,"share_of_record":0.0592},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":41,"repositories":5480,"share":0.0075,"share_of_record":0.0069},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":5,"repositories":3240,"share":0.0015,"share_of_record":0.0008},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":0,"repositories":120,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[54,247,339,304,299,483,780,1137,1248,1017]},{"key":"community","name":"Community & Adoption","bins":[25,182,414,843,1105,1174,1017,676,345,127]},{"key":"governance","name":"Sustainability & Governance","bins":[0,22,92,291,551,1555,1875,958,492,72]},{"key":"engineering","name":"Engineering Quality","bins":[10,31,184,215,730,818,1375,1351,843,351]},{"key":"security","name":"Security","bins":[15,38,317,835,1502,1644,969,471,106,11]},{"key":"ai_readiness","name":"AI Readiness","bins":[0,3,68,487,1057,1322,1282,838,659,192]}],"downloads_top1pct_share":0.4203}