{"ecosystem":"crates","ecosystem_label":"crates.io","indexed_repositories":8425,"inspected_repositories":8424,"monthly_downloads":36635238267,"median_score":67,"share_good_or_better":0.5382,"computed_at":"2026-10-24T01:28:34.340888Z","bands":[{"band":"exceptional","repositories":527,"monthly_downloads":7333532223},{"band":"excellent","repositories":1826,"monthly_downloads":10080194649},{"band":"good","repositories":2181,"monthly_downloads":7703224826},{"band":"moderate","repositories":2082,"monthly_downloads":4695579307},{"band":"weak","repositories":893,"monthly_downloads":2320881332},{"band":"at_risk","repositories":625,"monthly_downloads":4055585338},{"band":"critical","repositories":290,"monthly_downloads":446240592}],"histogram":[{"start":0,"count":1},{"start":5,"count":21},{"start":10,"count":73},{"start":15,"count":195},{"start":20,"count":138},{"start":25,"count":204},{"start":30,"count":283},{"start":35,"count":264},{"start":40,"count":283},{"start":45,"count":346},{"start":50,"count":659},{"start":55,"count":643},{"start":60,"count":780},{"start":65,"count":805},{"start":70,"count":592},{"start":75,"count":784},{"start":80,"count":885},{"start":85,"count":602},{"start":90,"count":598},{"start":95,"count":268}],"categories":[{"key":"vitality","name":"Vitality","median":72,"record_median":68,"repositories":8425},{"key":"community","name":"Community & Adoption","median":51,"record_median":44,"repositories":8425},{"key":"governance","name":"Sustainability & Governance","median":60,"record_median":58,"repositories":8425},{"key":"engineering","name":"Engineering Quality","median":70,"record_median":66,"repositories":8425},{"key":"security","name":"Security","median":52,"record_median":49,"repositories":8425},{"key":"ai_readiness","name":"AI Readiness","median":64,"record_median":57,"repositories":8425}],"practices":[{"key":"readme","label":"README","share":0.9416,"repositories":8424},{"key":"license","label":"License detected","share":0.9403,"repositories":8424},{"key":"ci","label":"CI workflows","share":0.9152,"repositories":8424},{"key":"tests","label":"Automated tests","share":0.7913,"repositories":8424},{"key":"linter","label":"Linter configuration","share":0.5623,"repositories":8424},{"key":"docs_dir","label":"Documentation directory","share":0.3754,"repositories":8424},{"key":"contributing","label":"Contributing guide","share":0.3223,"repositories":8424},{"key":"security_policy","label":"Security policy","share":0.189,"repositories":8424},{"key":"code_of_conduct","label":"Code of conduct","share":0.1848,"repositories":8424},{"key":"agent_instructions","label":"AI agent instructions","share":0.2672,"repositories":8424},{"key":"bootstrap","label":"One-command bootstrap","share":0.2975,"repositories":8424},{"key":"llms_txt","label":"llms.txt","share":0.1259,"repositories":8424}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":4505,"median_score":73},{"key":"user","label":"Personal accounts","repositories":3919,"median_score":60}],"bus_factor":[{"bucket":"1","repositories":6747},{"bucket":"2","repositories":1023},{"bucket":"3–5","repositories":522},{"bucket":"6+","repositories":117}],"single_maintainer_share":0.8024,"single_maintainer_high_reliance":1001,"licenses":[{"license":"Apache-2.0","state":"standard","repositories":3326},{"license":"MIT","state":"standard","repositories":2916},{"license":null,"state":"custom","repositories":789},{"license":null,"state":"absent","repositories":503},{"license":"GPL-3.0","state":"standard","repositories":167},{"license":"MPL-2.0","state":"standard","repositories":161},{"license":"BSD-3-Clause","state":"standard","repositories":144},{"license":"AGPL-3.0","state":"standard","repositories":135},{"license":"Unlicense","state":"standard","repositories":58},{"license":"BSD-2-Clause","state":"standard","repositories":47}],"ecosystems":[],"top_repositories":[{"id":35183,"full_name":"mozilla/source-map","url":"https://github.com/mozilla/source-map","description":"Consume and generate source maps.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"JavaScript","languages":["JavaScript","Rust"],"topics":[],"license_spdx":null,"license_state":"custom","stars":3724,"forks":369,"watchers":68,"monthly_downloads":1351911442,"latest_score":75,"latest_band":"good","latest_scanned_at":"2026-09-16T08:21:01.689819Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/mozilla/source-map?v=d567163a-1","icon_source_type":"avatar","badge_url":""},{"id":124,"full_name":"tailwindlabs/tailwindcss","url":"https://github.com/tailwindlabs/tailwindcss","description":"A utility-first CSS framework for rapid UI development.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"TypeScript","languages":["TypeScript","Rust"],"topics":["tailwindcss","css","css-framework","postcss","functional-css","utility-classes","responsive"],"license_spdx":"MIT","license_state":"standard","stars":97572,"forks":5802,"watchers":750,"monthly_downloads":1068160854,"latest_score":93,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T13:51:02.287685Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/tailwindlabs/tailwindcss?v=3c2d43f8-1","icon_source_type":"avatar","badge_url":""},{"id":253,"full_name":"pydantic/pydantic","url":"https://github.com/pydantic/pydantic","description":"Data validation using Python type hints","ecosystem":"pypi","ecosystems":["pypi","crates"],"primary_language":"Python","languages":["Python","Rust"],"topics":["validation","parsing","json-schema","pydantic","python39","python","hints","python310","python311","python312","python313"],"license_spdx":"MIT","license_state":"standard","stars":28781,"forks":2952,"watchers":177,"monthly_downloads":848914727,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T18:20:42.695176Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pydantic/pydantic?v=956b0efb-1","icon_source_type":"homepage","badge_url":""},{"id":249,"full_name":"pnpm/pnpm","url":"https://github.com/pnpm/pnpm","description":"Fast, disk space efficient package manager","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"Rust","languages":["Rust","TypeScript"],"topics":["npm","dependency-manager","package-manager","node","nodejs","install","modules","javascript","pnpm","rust","pnpm11","tarball"],"license_spdx":"MIT","license_state":"standard","stars":36538,"forks":1730,"watchers":164,"monthly_downloads":662868502,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T17:04:16.304082Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pnpm/pnpm?v=97c0104f-1","icon_source_type":"homepage","badge_url":""},{"id":29548,"full_name":"parcel-bundler/lightningcss","url":"https://github.com/parcel-bundler/lightningcss","description":"An extremely fast CSS parser, transformer, bundler, and minifier written in Rust.","ecosystem":"npm","ecosystems":["npm","crates"],"primary_language":"Rust","languages":["Rust"],"topics":["css","parser","compiler","minifier","rust","build-tool","parcel","selectors"],"license_spdx":"MPL-2.0","license_state":"standard","stars":7676,"forks":301,"watchers":24,"monthly_downloads":538546225,"latest_score":84,"latest_band":"excellent","latest_scanned_at":"2026-09-16T09:58:36.688853Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/parcel-bundler/lightningcss?v=4b28631f-1","icon_source_type":"avatar","badge_url":""},{"id":22452,"full_name":"rust-lang/futures-rs","url":"https://github.com/rust-lang/futures-rs","description":"Zero-cost asynchronous programming in Rust","ecosystem":"crates","ecosystems":["crates"],"primary_language":"Rust","languages":["Rust"],"topics":["async-foundations","async","future","futures","asynchronous"],"license_spdx":"Apache-2.0","license_state":"standard","stars":5922,"forks":707,"watchers":94,"monthly_downloads":473860078,"latest_score":92,"latest_band":"excellent","latest_scanned_at":"2026-09-16T09:46:45.393198Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/rust-lang/futures-rs?v=afc96eaf-1","icon_source_type":"avatar","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":5298,"median":60,"p25":47,"p75":73},{"label":"100 – 999","repositories":2030,"median":75,"p25":62,"p75":86},{"label":"1,000 – 9,999","repositories":868,"median":87,"p25":77,"p75":93},{"label":"10,000 and more","repositories":228,"median":94,"p25":87,"p75":96}],"popularity_downloads":[{"label":"Under 10K / month","repositories":2808,"median":67,"p25":54,"p75":78},{"label":"10K – 1M","repositories":2638,"median":71,"p25":57,"p75":83},{"label":"1M – 100M","repositories":1335,"median":67,"p25":48,"p75":84},{"label":"100M and more","repositories":54,"median":84,"p25":76,"p75":92}],"freshness":[{"label":"Pushed within 30 days","repositories":5873},{"label":"31 – 90 days","repositories":1457},{"label":"91 – 365 days","repositories":515},{"label":"Over a year","repositories":579}],"median_days_since_push":5,"dependencies":{"basis":6135,"median_direct":11,"median_indirect":79,"median_total":91,"buckets":[{"label":"0","repositories":261},{"label":"1 – 5","repositories":734},{"label":"6 – 20","repositories":1098},{"label":"21 – 50","repositories":643},{"label":"51 – 200","repositories":983},{"label":"201 – 500","repositories":1058},{"label":"501 – 1,000","repositories":688},{"label":"Over 1,000","repositories":670}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":8319,"inconclusive_share":0.002},{"name":"Signed-Releases","mean":0.7,"measured":2595,"inconclusive_share":0.6887},{"name":"SAST","mean":1.1,"measured":8311,"inconclusive_share":0.003},{"name":"Fuzzing","mean":1.3,"measured":8331,"inconclusive_share":0.0006},{"name":"Branch-Protection","mean":1.4,"measured":6150,"inconclusive_share":0.2622},{"name":"Pinned-Dependencies","mean":1.9,"measured":7662,"inconclusive_share":0.0809},{"name":"Token-Permissions","mean":1.9,"measured":7598,"inconclusive_share":0.0885},{"name":"Code-Review","mean":2.4,"measured":8330,"inconclusive_share":0.0007},{"name":"Security-Policy","mean":2.4,"measured":8336,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":4.3,"measured":8336,"inconclusive_share":0.0},{"name":"Maintained","mean":6.3,"measured":8336,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":6.3,"measured":8330,"inconclusive_share":0.0007},{"name":"Contributors","mean":6.6,"measured":8336,"inconclusive_share":0.0},{"name":"CI-Tests","mean":7.1,"measured":6998,"inconclusive_share":0.1605},{"name":"License","mean":9.3,"measured":8336,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":9.6,"measured":8336,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.7,"measured":7598,"inconclusive_share":0.0885},{"name":"Packaging","mean":10.0,"measured":2864,"inconclusive_share":0.6564}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":575,"repositories":8425,"share":0.0682,"share_of_record":0.0683},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":80,"repositories":7789,"share":0.0103,"share_of_record":0.0095},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":7,"repositories":5485,"share":0.0013,"share_of_record":0.0008},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":121,"share":0.0083,"share_of_record":0.0001}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[59,415,486,444,551,806,1138,1541,1679,1306]},{"key":"community","name":"Community & Adoption","bins":[40,304,598,1330,1675,1754,1328,830,419,147]},{"key":"governance","name":"Sustainability & Governance","bins":[0,22,118,437,887,2493,2691,1221,486,70]},{"key":"engineering","name":"Engineering Quality","bins":[17,37,234,289,823,1069,1567,2083,1621,685]},{"key":"security","name":"Security","bins":[26,49,372,1121,2100,2326,1500,722,188,21]},{"key":"ai_readiness","name":"AI Readiness","bins":[0,1,26,459,1153,1667,2051,1445,1133,490]}],"downloads_top1pct_share":0.477}