{"ecosystem":"go","ecosystem_label":"Go","indexed_repositories":25958,"inspected_repositories":25957,"monthly_downloads":1482207214,"median_score":53,"share_good_or_better":0.3126,"computed_at":"2026-10-16T10:52:25.418477Z","bands":[{"band":"exceptional","repositories":925,"monthly_downloads":386958472},{"band":"excellent","repositories":3056,"monthly_downloads":86728654},{"band":"good","repositories":4132,"monthly_downloads":703432514},{"band":"moderate","repositories":6415,"monthly_downloads":207574765},{"band":"weak","repositories":5524,"monthly_downloads":7042658},{"band":"at_risk","repositories":4544,"monthly_downloads":58411553},{"band":"critical","repositories":1361,"monthly_downloads":32058598}],"histogram":[{"start":0,"count":26},{"start":5,"count":173},{"start":10,"count":343},{"start":15,"count":819},{"start":20,"count":972},{"start":25,"count":1666},{"start":30,"count":1906},{"start":35,"count":1990},{"start":40,"count":1680},{"start":45,"count":1854},{"start":50,"count":2493},{"start":55,"count":1995},{"start":60,"count":1927},{"start":65,"count":1761},{"start":70,"count":1061},{"start":75,"count":1310},{"start":80,"count":1448},{"start":85,"count":1068},{"start":90,"count":954},{"start":95,"count":511}],"categories":[{"key":"vitality","name":"Vitality","median":68,"record_median":68,"repositories":25958},{"key":"community","name":"Community & Adoption","median":28,"record_median":45,"repositories":25958},{"key":"governance","name":"Sustainability & Governance","median":52,"record_median":58,"repositories":25958},{"key":"engineering","name":"Engineering Quality","median":62,"record_median":66,"repositories":25958},{"key":"security","name":"Security","median":44,"record_median":49,"repositories":25958},{"key":"ai_readiness","name":"AI Readiness","median":65,"record_median":56,"repositories":25958}],"practices":[{"key":"readme","label":"README","share":0.8904,"repositories":25957},{"key":"license","label":"License detected","share":0.8751,"repositories":25957},{"key":"ci","label":"CI workflows","share":0.7734,"repositories":25957},{"key":"tests","label":"Automated tests","share":0.9064,"repositories":25957},{"key":"linter","label":"Linter configuration","share":0.4009,"repositories":25957},{"key":"docs_dir","label":"Documentation directory","share":0.4061,"repositories":25957},{"key":"contributing","label":"Contributing guide","share":0.2775,"repositories":25957},{"key":"security_policy","label":"Security policy","share":0.1785,"repositories":25957},{"key":"code_of_conduct","label":"Code of conduct","share":0.1623,"repositories":25957},{"key":"agent_instructions","label":"AI agent instructions","share":0.2834,"repositories":25957},{"key":"bootstrap","label":"One-command bootstrap","share":0.5397,"repositories":25957},{"key":"llms_txt","label":"llms.txt","share":0.1242,"repositories":25957}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":12612,"median_score":62},{"key":"user","label":"Personal accounts","repositories":13345,"median_score":45}],"bus_factor":[{"bucket":"1","repositories":21376},{"bucket":"2","repositories":2341},{"bucket":"3–5","repositories":1442},{"bucket":"6+","repositories":315}],"single_maintainer_share":0.8391,"single_maintainer_high_reliance":23,"licenses":[{"license":"MIT","state":"standard","repositories":11068},{"license":"Apache-2.0","state":"standard","repositories":6934},{"license":null,"state":"absent","repositories":3242},{"license":null,"state":"custom","repositories":1560},{"license":"BSD-3-Clause","state":"standard","repositories":687},{"license":"GPL-3.0","state":"standard","repositories":681},{"license":"AGPL-3.0","state":"standard","repositories":626},{"license":"MPL-2.0","state":"standard","repositories":535},{"license":"BSD-2-Clause","state":"standard","repositories":193},{"license":"LGPL-3.0","state":"standard","repositories":83}],"ecosystems":[],"top_repositories":[{"id":35199,"full_name":"WebReflection/flatted","url":"https://github.com/WebReflection/flatted","description":"A fast and minimal circular JSON parser.","ecosystem":"npm","ecosystems":["npm","go"],"primary_language":"JavaScript","languages":["JavaScript","Go","PHP"],"topics":["circular","json","fast","parser","minimal"],"license_spdx":"ISC","license_state":"standard","stars":1156,"forks":99,"watchers":10,"monthly_downloads":582996071,"latest_score":71,"latest_band":"good","latest_scanned_at":"2026-09-16T09:07:09.496706Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/WebReflection/flatted?v=401707dd-1","icon_source_type":"avatar","badge_url":""},{"id":3075,"full_name":"modal-labs/modal-client","url":"https://github.com/modal-labs/modal-client","description":"SDK libraries for Modal","ecosystem":"pypi","ecosystems":["pypi","npm","go"],"primary_language":"Python","languages":["Python","Go","TypeScript"],"topics":["cloud","data-science","distributed","machine-learning","modal","python","serverless","ai","genai","client","infrastructure"],"license_spdx":"Apache-2.0","license_state":"standard","stars":511,"forks":124,"watchers":9,"monthly_downloads":82585265,"latest_score":94,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T12:07:23.035815Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/modal-labs/modal-client?v=51b29840-1","icon_source_type":"homepage","badge_url":""},{"id":30751,"full_name":"tree-sitter/tree-sitter-bash","url":"https://github.com/tree-sitter/tree-sitter-bash","description":"Bash grammar for tree-sitter","ecosystem":"pypi","ecosystems":["pypi","npm","crates","go"],"primary_language":"C","languages":["C","JavaScript"],"topics":["tree-sitter","bash","parser","incremental","parsing","text-editors"],"license_spdx":"MIT","license_state":"standard","stars":327,"forks":120,"watchers":10,"monthly_downloads":41438157,"latest_score":62,"latest_band":"moderate","latest_scanned_at":"2026-08-27T15:11:40.787079Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"dormant","red_flags":[],"icon_url":"/icon/v1/tree-sitter/tree-sitter-bash?v=a07c055f-1","icon_source_type":"avatar","badge_url":""},{"id":1378,"full_name":"cucumber/messages","url":"https://github.com/cucumber/messages","description":"A message protocol for representing results and other information from Cucumber","ecosystem":"npm","ecosystems":["npm","packagist","hex","pypi","rubygems","go","maven"],"primary_language":"C#","languages":["C#","PHP","Java","C++","Dart"],"topics":["polyglot-release","dotnet","elixir","go","java","javascript","perl","php","ruby","tidelift","gherkin","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":41,"forks":24,"watchers":68,"monthly_downloads":34826805,"latest_score":95,"latest_band":"exceptional","latest_scanned_at":"2026-08-22T17:08:30.778181Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/messages?v=07b417f0-1","icon_source_type":"avatar","badge_url":""},{"id":4837,"full_name":"google/flatbuffers","url":"https://github.com/google/flatbuffers","description":"FlatBuffers: Memory Efficient Serialization Library","ecosystem":"npm","ecosystems":["npm","packagist","maven","pypi","go"],"primary_language":"C++","languages":["C++","Rust"],"topics":["flatbuffers","serialization","serialization-library","json-parser","marshalling","rpc","zero-copy","mmap","cross-platform","c-plus-plus","java","c-sharp","go","python","rust","javascript","typescript","grpc","protobuf","google"],"license_spdx":"Apache-2.0","license_state":"standard","stars":26468,"forks":3660,"watchers":627,"monthly_downloads":32818574,"latest_score":34,"latest_band":"at_risk","latest_scanned_at":"2026-09-16T11:57:58.102444Z","has_high_risk_jurisdiction_exposure":true,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":["high_risk_jurisdiction_exposure"],"icon_url":"/icon/v1/google/flatbuffers?v=023854c4-1","icon_source_type":"homepage","badge_url":""},{"id":26029,"full_name":"cucumber/gherkin","url":"https://github.com/cucumber/gherkin","description":"A parser and compiler for the Gherkin language.","ecosystem":"npm","ecosystems":["npm","pypi","packagist","hex","rubygems","go","maven"],"primary_language":"C","languages":["C"],"topics":["gherkin","polyglot-release","dart","dotnet","elixir","go","java","javascript","lexer","objective-c","parser","perl","php","python","ruby","tidelift","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":400,"forks":101,"watchers":91,"monthly_downloads":32511421,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:11:25.987179Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/gherkin?v=cf8da60d-1","icon_source_type":"readme","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":22337,"median":50,"p25":35,"p75":63},{"label":"100 – 999","repositories":2244,"median":78,"p25":62,"p75":89},{"label":"1,000 – 9,999","repositories":1092,"median":86,"p25":69,"p75":94},{"label":"10,000 and more","repositories":284,"median":94,"p25":87,"p75":98}],"popularity_downloads":[{"label":"Under 10K / month","repositories":749,"median":63,"p25":53,"p75":75},{"label":"10K – 1M","repositories":186,"median":83,"p25":69,"p75":91},{"label":"1M – 100M","repositories":70,"median":86,"p25":60,"p75":94},{"label":"100M and more","repositories":1,"median":71,"p25":71,"p75":71}],"freshness":[{"label":"Pushed within 30 days","repositories":15637},{"label":"31 – 90 days","repositories":7427},{"label":"91 – 365 days","repositories":1341},{"label":"Over a year","repositories":1552}],"median_days_since_push":16,"dependencies":{"basis":13848,"median_direct":7,"median_indirect":28,"median_total":38,"buckets":[{"label":"0","repositories":1123},{"label":"1 – 5","repositories":1872},{"label":"6 – 20","repositories":2465},{"label":"21 – 50","repositories":2171},{"label":"51 – 200","repositories":3531},{"label":"201 – 500","repositories":1460},{"label":"501 – 1,000","repositories":649},{"label":"Over 1,000","repositories":577}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":25743,"inconclusive_share":0.0024},{"name":"Branch-Protection","mean":1.0,"measured":21471,"inconclusive_share":0.168},{"name":"Fuzzing","mean":1.1,"measured":25785,"inconclusive_share":0.0008},{"name":"Signed-Releases","mean":1.1,"measured":10547,"inconclusive_share":0.5913},{"name":"Code-Review","mean":1.6,"measured":25667,"inconclusive_share":0.0053},{"name":"SAST","mean":1.7,"measured":25771,"inconclusive_share":0.0013},{"name":"Token-Permissions","mean":2.1,"measured":19844,"inconclusive_share":0.231},{"name":"Pinned-Dependencies","mean":2.2,"measured":20570,"inconclusive_share":0.2029},{"name":"Security-Policy","mean":2.3,"measured":25805,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":3.9,"measured":25805,"inconclusive_share":0.0},{"name":"Contributors","mean":4.4,"measured":25805,"inconclusive_share":0.0},{"name":"Maintained","mean":5.2,"measured":25805,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":5.4,"measured":25794,"inconclusive_share":0.0004},{"name":"CI-Tests","mean":7.1,"measured":16194,"inconclusive_share":0.3724},{"name":"License","mean":8.7,"measured":25805,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":9.8,"measured":25805,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.8,"measured":19844,"inconclusive_share":0.231},{"name":"Packaging","mean":10.0,"measured":7359,"inconclusive_share":0.7148}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":1608,"repositories":25958,"share":0.0619,"share_of_record":0.0619},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":513,"repositories":20704,"share":0.0248,"share_of_record":0.0198},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":6,"repositories":12912,"share":0.0005,"share_of_record":0.0002},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":0,"repositories":146,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[69,799,1153,798,2117,4091,4769,4856,4445,2861]},{"key":"community","name":"Community & Adoption","bins":[678,4324,8703,4092,3374,1873,1262,833,546,273]},{"key":"governance","name":"Sustainability & Governance","bins":[3,246,1050,5236,4433,7428,3801,2345,1196,220]},{"key":"engineering","name":"Engineering Quality","bins":[315,438,1138,2834,2570,3861,5274,5133,3414,981]},{"key":"security","name":"Security","bins":[189,968,4134,5442,4780,4440,3401,1929,587,88]},{"key":"ai_readiness","name":"AI Readiness","bins":[3,23,95,927,2696,5699,6639,4835,3716,1325]}],"downloads_top1pct_share":0.9992}