{"ecosystem":"go","ecosystem_label":"Go","indexed_repositories":10164,"inspected_repositories":10161,"monthly_downloads":1181891496,"median_score":53,"share_good_or_better":0.1401,"computed_at":"2026-07-23T09:11:13.549015Z","bands":[{"band":"excellent","repositories":134,"monthly_downloads":55289582},{"band":"good","repositories":1290,"monthly_downloads":272903435},{"band":"moderate","repositories":4731,"monthly_downloads":715031739},{"band":"at_risk","repositories":3478,"monthly_downloads":138662284},{"band":"critical","repositories":528,"monthly_downloads":4456}],"histogram":[{"start":0,"count":0},{"start":5,"count":53},{"start":10,"count":43},{"start":15,"count":44},{"start":20,"count":119},{"start":25,"count":269},{"start":30,"count":515},{"start":35,"count":803},{"start":40,"count":954},{"start":45,"count":1206},{"start":50,"count":1379},{"start":55,"count":1369},{"start":60,"count":1161},{"start":65,"count":822},{"start":70,"count":679},{"start":75,"count":360},{"start":80,"count":251},{"start":85,"count":118},{"start":90,"count":16},{"start":95,"count":0}],"categories":[{"key":"vitality","name":"Vitality","median":74,"record_median":73,"repositories":10164},{"key":"community","name":"Community & Adoption","median":30,"record_median":46,"repositories":10164},{"key":"governance","name":"Sustainability & Governance","median":53,"record_median":59,"repositories":10164},{"key":"engineering","name":"Engineering Quality","median":65,"record_median":66,"repositories":10164},{"key":"security","name":"Security","median":42,"record_median":45,"repositories":10164},{"key":"ai_readiness","name":"AI Readiness","median":56,"record_median":46,"repositories":10164}],"practices":[{"key":"readme","label":"README","share":0.9136,"repositories":10161},{"key":"license","label":"License detected","share":0.8726,"repositories":10161},{"key":"ci","label":"CI workflows","share":0.782,"repositories":10161},{"key":"tests","label":"Automated tests","share":0.9106,"repositories":10161},{"key":"linter","label":"Linter configuration","share":0.4229,"repositories":10161},{"key":"docs_dir","label":"Documentation directory","share":0.4329,"repositories":10161},{"key":"contributing","label":"Contributing guide","share":0.3132,"repositories":10161},{"key":"security_policy","label":"Security policy","share":0.1799,"repositories":10161},{"key":"code_of_conduct","label":"Code of conduct","share":0.1876,"repositories":10161},{"key":"agent_instructions","label":"AI agent instructions","share":0.3106,"repositories":10161},{"key":"bootstrap","label":"One-command bootstrap","share":0.5642,"repositories":10161},{"key":"llms_txt","label":"llms.txt","share":0.0155,"repositories":10161}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":5610,"median_score":58},{"key":"user","label":"Personal accounts","repositories":4551,"median_score":49}],"bus_factor":[{"bucket":"1","repositories":8026},{"bucket":"2","repositories":1160},{"bucket":"3–5","repositories":676},{"bucket":"6+","repositories":141}],"single_maintainer_share":0.8024,"single_maintainer_high_reliance":11,"licenses":[{"license":"MIT","state":"standard","repositories":4127},{"license":"Apache-2.0","state":"standard","repositories":2925},{"license":null,"state":"absent","repositories":1295},{"license":null,"state":"custom","repositories":581},{"license":"GPL-3.0","state":"standard","repositories":295},{"license":"AGPL-3.0","state":"standard","repositories":287},{"license":"BSD-3-Clause","state":"standard","repositories":228},{"license":"MPL-2.0","state":"standard","repositories":202},{"license":"BSD-2-Clause","state":"standard","repositories":69},{"license":"GPL-2.0","state":"standard","repositories":36}],"ecosystems":[],"top_repositories":[{"id":35199,"full_name":"WebReflection/flatted","url":"https://github.com/WebReflection/flatted","description":"A fast and minimal circular JSON parser.","ecosystem":"npm","ecosystems":["npm","go"],"primary_language":"JavaScript","languages":["JavaScript","Go","PHP"],"topics":["circular","json","fast","parser","minimal"],"license_spdx":"ISC","license_state":"standard","stars":1149,"forks":97,"watchers":10,"monthly_downloads":552604973,"latest_score":65,"latest_band":"moderate","latest_scanned_at":"2026-07-22T16:10:46.950324Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"badge_url":""},{"id":4837,"full_name":"google/flatbuffers","url":"https://github.com/google/flatbuffers","description":"FlatBuffers: Memory Efficient Serialization Library","ecosystem":"pypi","ecosystems":["pypi","npm","packagist","go","maven"],"primary_language":"C++","languages":["C++","Rust"],"topics":["flatbuffers","serialization","serialization-library","json-parser","marshalling","rpc","zero-copy","mmap","cross-platform","c-plus-plus","java","c-sharp","go","python","rust","javascript","typescript","grpc","protobuf","google"],"license_spdx":"Apache-2.0","license_state":"standard","stars":26240,"forks":3606,"watchers":629,"monthly_downloads":119765899,"latest_score":40,"latest_band":"at_risk","latest_scanned_at":"2026-07-20T17:02:44.024503Z","has_high_risk_jurisdiction_exposure":true,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":["high_risk_jurisdiction_exposure"],"badge_url":""},{"id":3075,"full_name":"modal-labs/modal-client","url":"https://github.com/modal-labs/modal-client","description":"SDK libraries for Modal","ecosystem":"go","ecosystems":["go","npm","pypi"],"primary_language":"Python","languages":[],"topics":["ai","cloud","data-science","distributed","genai","machine-learning","modal","python","serverless"],"license_spdx":"Apache-2.0","license_state":"standard","stars":493,"forks":108,"watchers":9,"monthly_downloads":56502262,"latest_score":73,"latest_band":"good","latest_scanned_at":"2026-07-14T08:04:56.839489Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":[],"badge_url":""},{"id":1378,"full_name":"cucumber/messages","url":"https://github.com/cucumber/messages","description":"A message protocol for representing results and other information from Cucumber","ecosystem":"go","ecosystems":["go","hex","maven","npm","packagist","pypi","rubygems"],"primary_language":"C#","languages":[],"topics":["dotnet","elixir","go","java","javascript","perl","php","polyglot-release","ruby","tidelift"],"license_spdx":"MIT","license_state":"standard","stars":40,"forks":24,"watchers":68,"monthly_downloads":30116305,"latest_score":79,"latest_band":"good","latest_scanned_at":"2026-07-13T21:42:33.390568Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":[],"badge_url":""},{"id":30871,"full_name":"apache/airflow","url":"https://github.com/apache/airflow","description":"Apache Airflow - A platform to programmatically author, schedule, and monitor workflows","ecosystem":"pypi","ecosystems":["pypi","npm","go","maven"],"primary_language":"Python","languages":["Python"],"topics":["airflow","apache","apache-airflow","python","scheduler","workflow","automation","dag","data-engineering","data-integration","data-orchestrator","data-pipelines","data-science","elt","etl","machine-learning","mlops","orchestration","workflow-engine","workflow-orchestration","data","pipelines"],"license_spdx":"Apache-2.0","license_state":"standard","stars":46191,"forks":17407,"watchers":781,"monthly_downloads":28891797,"latest_score":93,"latest_band":"excellent","latest_scanned_at":"2026-07-21T02:34:57.958196Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":[],"badge_url":""},{"id":26029,"full_name":"cucumber/gherkin","url":"https://github.com/cucumber/gherkin","description":"A parser and compiler for the Gherkin language.","ecosystem":"npm","ecosystems":["npm","pypi","packagist","hex","rubygems","go","maven"],"primary_language":"C","languages":["C"],"topics":["gherkin","polyglot-release","dart","dotnet","elixir","go","java","javascript","lexer","objective-c","parser","perl","php","python","ruby","tidelift","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":372,"forks":98,"watchers":91,"monthly_downloads":27777826,"latest_score":82,"latest_band":"good","latest_scanned_at":"2026-07-19T16:58:40.636359Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"unverified","red_flags":[],"badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":8725,"median":51,"p25":42,"p75":60},{"label":"100 – 999","repositories":865,"median":68,"p25":60,"p75":76},{"label":"1,000 – 9,999","repositories":412,"median":75,"p25":69,"p75":82},{"label":"10,000 and more","repositories":159,"median":81,"p25":75,"p75":87}],"popularity_downloads":[{"label":"Under 10K / month","repositories":1463,"median":52,"p25":40,"p75":59},{"label":"10K – 1M","repositories":65,"median":69,"p25":62,"p75":76},{"label":"1M – 100M","repositories":47,"median":72,"p25":57,"p75":81},{"label":"100M and more","repositories":2,"median":52,"p25":34,"p75":71}],"freshness":[{"label":"Pushed within 30 days","repositories":9710},{"label":"31 – 90 days","repositories":90},{"label":"91 – 365 days","repositories":124},{"label":"Over a year","repositories":237}],"median_days_since_push":2,"dependencies":{"basis":5430,"median_direct":9,"median_indirect":42,"median_total":55,"buckets":[{"label":"0","repositories":304},{"label":"1 – 5","repositories":554},{"label":"6 – 20","repositories":944},{"label":"21 – 50","repositories":831},{"label":"51 – 200","repositories":1520},{"label":"201 – 500","repositories":698},{"label":"501 – 1,000","repositories":311},{"label":"Over 1,000","repositories":268}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":10055,"inconclusive_share":0.0011},{"name":"Fuzzing","mean":1.0,"measured":10064,"inconclusive_share":0.0002},{"name":"Signed-Releases","mean":1.1,"measured":4341,"inconclusive_share":0.5687},{"name":"Branch-Protection","mean":1.2,"measured":8158,"inconclusive_share":0.1895},{"name":"Code-Review","mean":1.7,"measured":10017,"inconclusive_share":0.0049},{"name":"SAST","mean":1.9,"measured":10062,"inconclusive_share":0.0004},{"name":"Token-Permissions","mean":1.9,"measured":7832,"inconclusive_share":0.2219},{"name":"Pinned-Dependencies","mean":2.1,"measured":8069,"inconclusive_share":0.1984},{"name":"Security-Policy","mean":2.4,"measured":10066,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":4.1,"measured":10066,"inconclusive_share":0.0},{"name":"Contributors","mean":4.4,"measured":10065,"inconclusive_share":0.0001},{"name":"Maintained","mean":5.5,"measured":10066,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":6.1,"measured":10061,"inconclusive_share":0.0005},{"name":"CI-Tests","mean":7.6,"measured":6406,"inconclusive_share":0.3636},{"name":"License","mean":8.7,"measured":10065,"inconclusive_share":0.0001},{"name":"Dangerous-Workflow","mean":9.7,"measured":7832,"inconclusive_share":0.2219},{"name":"Binary-Artifacts","mean":9.8,"measured":10065,"inconclusive_share":0.0001},{"name":"Packaging","mean":10.0,"measured":3108,"inconclusive_share":0.6912}],"red_flags":[{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":238,"repositories":7984,"share":0.0298,"share_of_record":0.0234},{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":64,"repositories":10164,"share":0.0063,"share_of_record":0.0063},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":0,"repositories":1233,"share":0.0,"share_of_record":0.0},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":0,"repositories":145,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[17,92,309,207,199,711,2295,2535,2133,1666]},{"key":"community","name":"Community & Adoption","bins":[239,1504,3302,1620,1486,790,500,353,228,142]},{"key":"governance","name":"Sustainability & Governance","bins":[3,242,470,1901,1669,2638,1630,1114,476,21]},{"key":"engineering","name":"Engineering Quality","bins":[118,168,388,994,912,1437,2035,2098,1572,442]},{"key":"security","name":"Security","bins":[93,383,1682,2405,1965,1728,1175,532,171,30]},{"key":"ai_readiness","name":"AI Readiness","bins":[8,52,232,639,2611,2617,1301,1380,1183,141]}],"downloads_top1pct_share":0.9993}