{"ecosystem":"hex","ecosystem_label":"Hex","indexed_repositories":1641,"inspected_repositories":1641,"monthly_downloads":328838637,"median_score":50,"share_good_or_better":0.223,"computed_at":"2026-10-23T04:32:08.877673Z","bands":[{"band":"exceptional","repositories":12,"monthly_downloads":112042924},{"band":"excellent","repositories":119,"monthly_downloads":97287561},{"band":"good","repositories":235,"monthly_downloads":22855611},{"band":"moderate","repositories":481,"monthly_downloads":50082196},{"band":"weak","repositories":452,"monthly_downloads":26889942},{"band":"at_risk","repositories":304,"monthly_downloads":19026358},{"band":"critical","repositories":38,"monthly_downloads":654045}],"histogram":[{"start":0,"count":0},{"start":5,"count":1},{"start":10,"count":8},{"start":15,"count":29},{"start":20,"count":63},{"start":25,"count":117},{"start":30,"count":124},{"start":35,"count":161},{"start":40,"count":133},{"start":45,"count":158},{"start":50,"count":216},{"start":55,"count":156},{"start":60,"count":109},{"start":65,"count":121},{"start":70,"count":56},{"start":75,"count":58},{"start":80,"count":60},{"start":85,"count":42},{"start":90,"count":21},{"start":95,"count":8}],"categories":[{"key":"vitality","name":"Vitality","median":48,"record_median":68,"repositories":1641},{"key":"community","name":"Community & Adoption","median":48,"record_median":44,"repositories":1641},{"key":"governance","name":"Sustainability & Governance","median":61,"record_median":58,"repositories":1641},{"key":"engineering","name":"Engineering Quality","median":56,"record_median":66,"repositories":1641},{"key":"security","name":"Security","median":38,"record_median":49,"repositories":1641},{"key":"ai_readiness","name":"AI Readiness","median":40,"record_median":57,"repositories":1641}],"practices":[{"key":"readme","label":"README","share":0.975,"repositories":1641},{"key":"license","label":"License detected","share":0.9074,"repositories":1641},{"key":"ci","label":"CI workflows","share":0.8269,"repositories":1641},{"key":"tests","label":"Automated tests","share":0.9634,"repositories":1641},{"key":"linter","label":"Linter configuration","share":0.0305,"repositories":1641},{"key":"docs_dir","label":"Documentation directory","share":0.2364,"repositories":1641},{"key":"contributing","label":"Contributing guide","share":0.1999,"repositories":1641},{"key":"security_policy","label":"Security policy","share":0.05,"repositories":1641},{"key":"code_of_conduct","label":"Code of conduct","share":0.1603,"repositories":1641},{"key":"agent_instructions","label":"AI agent instructions","share":0.1292,"repositories":1641},{"key":"bootstrap","label":"One-command bootstrap","share":0.1913,"repositories":1641},{"key":"llms_txt","label":"llms.txt","share":0.0823,"repositories":1641}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":873,"median_score":56},{"key":"user","label":"Personal accounts","repositories":768,"median_score":44}],"bus_factor":[{"bucket":"1","repositories":1328},{"bucket":"2","repositories":216},{"bucket":"3–5","repositories":83},{"bucket":"6+","repositories":4}],"single_maintainer_share":0.8142,"single_maintainer_high_reliance":27,"licenses":[{"license":"MIT","state":"standard","repositories":736},{"license":"Apache-2.0","state":"standard","repositories":473},{"license":null,"state":"custom","repositories":225},{"license":null,"state":"absent","repositories":152},{"license":"BSD-2-Clause","state":"standard","repositories":12},{"license":"BSD-3-Clause","state":"standard","repositories":11},{"license":"ISC","state":"standard","repositories":9},{"license":"AGPL-3.0","state":"standard","repositories":7},{"license":"GPL-3.0","state":"standard","repositories":4},{"license":"GPL-2.0","state":"standard","repositories":3}],"ecosystems":[],"top_repositories":[{"id":24862,"full_name":"supabase/phoenix","url":"https://github.com/supabase/phoenix","description":"Peace of mind from prototype to production","ecosystem":"npm","ecosystems":["npm","hex"],"primary_language":"Elixir","languages":["Elixir","JavaScript"],"topics":[],"license_spdx":"MIT","license_state":"standard","stars":3,"forks":9,"watchers":0,"monthly_downloads":66850871,"latest_score":81,"latest_band":"excellent","latest_scanned_at":"2026-08-27T12:13:55.881872Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/supabase/phoenix?v=c759e91a-1","icon_source_type":"homepage","badge_url":""},{"id":8646,"full_name":"taskforcesh/bullmq","url":"https://github.com/taskforcesh/bullmq","description":"BullMQ - Message Queue and Batch processing for NodeJS, Python, .NET, Elixir, Rust and PHP based on Redis or PostgreSQL","ecosystem":"npm","ecosystems":["npm","pypi","hex","crates","packagist"],"primary_language":"TypeScript","languages":["TypeScript","Rust","Elixir"],"topics":["background-jobs","nodejs","queue","redis","typescript","python","elixir","php","rust","bull","bullmq","queues","jobs","background","job","worker","asynchronous","database"],"license_spdx":"MIT","license_state":"standard","stars":9336,"forks":672,"watchers":36,"monthly_downloads":36080972,"latest_score":99,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:15:56.470933Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/taskforcesh/bullmq?v=16978fb5-1","icon_source_type":"homepage","badge_url":""},{"id":26029,"full_name":"cucumber/gherkin","url":"https://github.com/cucumber/gherkin","description":"A parser and compiler for the Gherkin language.","ecosystem":"npm","ecosystems":["npm","pypi","packagist","hex","rubygems","go","maven"],"primary_language":"C","languages":["C"],"topics":["gherkin","polyglot-release","dart","dotnet","elixir","go","java","javascript","lexer","objective-c","parser","perl","php","python","ruby","tidelift","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":400,"forks":101,"watchers":91,"monthly_downloads":32511421,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:11:25.987179Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/gherkin?v=cf8da60d-1","icon_source_type":"readme","badge_url":""},{"id":1378,"full_name":"cucumber/messages","url":"https://github.com/cucumber/messages","description":"A message protocol for representing results and other information from Cucumber","ecosystem":"npm","ecosystems":["npm","packagist","hex","pypi","rubygems","go","maven"],"primary_language":"C#","languages":["C#","PHP","Java","C++","Dart"],"topics":["polyglot-release","dotnet","elixir","go","java","javascript","perl","php","ruby","tidelift","gherkin","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":41,"forks":24,"watchers":68,"monthly_downloads":29288676,"latest_score":94,"latest_band":"exceptional","latest_scanned_at":"2026-10-20T09:33:46.408422Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/messages?v=07b417f0-1","icon_source_type":"avatar","badge_url":""},{"id":30667,"full_name":"ethereum/c-kzg-4844","url":"https://github.com/ethereum/c-kzg-4844","description":"A minimal implementation of the Polynomial Commitments API for EIP-4844 and EIP-7594, written in C.","ecosystem":"pypi","ecosystems":["pypi","crates","go","hex"],"primary_language":"C","languages":["C","Rust"],"topics":[],"license_spdx":"Apache-2.0","license_state":"standard","stars":174,"forks":159,"watchers":14,"monthly_downloads":7391709,"latest_score":91,"latest_band":"excellent","latest_scanned_at":"2026-08-27T16:49:32.482347Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/ethereum/c-kzg-4844?v=918e9196-1","icon_source_type":"avatar","badge_url":""},{"id":278,"full_name":"phoenixframework/phoenix","url":"https://github.com/phoenixframework/phoenix","description":"Peace of mind from prototype to production","ecosystem":"npm","ecosystems":["npm","hex"],"primary_language":"Elixir","languages":["Elixir","JavaScript"],"topics":["elixir","web-framework","distributed","realtime","api-server"],"license_spdx":"MIT","license_state":"standard","stars":23156,"forks":3110,"watchers":538,"monthly_downloads":6597997,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T19:41:34.574031Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/phoenixframework/phoenix?v=6e581290-1","icon_source_type":"tree","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":1112,"median":47,"p25":34,"p75":57},{"label":"100 – 999","repositories":437,"median":54,"p25":44,"p75":69},{"label":"1,000 – 9,999","repositories":86,"median":74,"p25":58,"p75":84},{"label":"10,000 and more","repositories":6,"median":96,"p25":89,"p75":96}],"popularity_downloads":[{"label":"Under 10K / month","repositories":828,"median":47,"p25":35,"p75":59},{"label":"10K – 1M","repositories":605,"median":53,"p25":41,"p75":67},{"label":"1M – 100M","repositories":49,"median":62,"p25":48,"p75":82},{"label":"100M and more","repositories":0,"median":null,"p25":null,"p75":null}],"freshness":[{"label":"Pushed within 30 days","repositories":646},{"label":"31 – 90 days","repositories":304},{"label":"91 – 365 days","repositories":440},{"label":"Over a year","repositories":251}],"median_days_since_push":57,"dependencies":{"basis":1224,"median_direct":0,"median_indirect":0,"median_total":0,"buckets":[{"label":"0","repositories":1040},{"label":"1 – 5","repositories":12},{"label":"6 – 20","repositories":24},{"label":"21 – 50","repositories":37},{"label":"51 – 200","repositories":50},{"label":"201 – 500","repositories":25},{"label":"501 – 1,000","repositories":19},{"label":"Over 1,000","repositories":17}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":1601,"inconclusive_share":0.0006},{"name":"SAST","mean":0.4,"measured":1585,"inconclusive_share":0.0106},{"name":"Signed-Releases","mean":0.4,"measured":124,"inconclusive_share":0.9226},{"name":"Branch-Protection","mean":0.6,"measured":1230,"inconclusive_share":0.2322},{"name":"Pinned-Dependencies","mean":0.8,"measured":1327,"inconclusive_share":0.1717},{"name":"Fuzzing","mean":1.2,"measured":1601,"inconclusive_share":0.0006},{"name":"Security-Policy","mean":1.3,"measured":1602,"inconclusive_share":0.0},{"name":"Token-Permissions","mean":1.7,"measured":1324,"inconclusive_share":0.1735},{"name":"Code-Review","mean":2.1,"measured":1596,"inconclusive_share":0.0037},{"name":"Dependency-Update-Tool","mean":2.4,"measured":1602,"inconclusive_share":0.0},{"name":"Maintained","mean":3.3,"measured":1602,"inconclusive_share":0.0},{"name":"CI-Tests","mean":3.9,"measured":1357,"inconclusive_share":0.1529},{"name":"Contributors","mean":6.4,"measured":1601,"inconclusive_share":0.0006},{"name":"Vulnerabilities","mean":6.9,"measured":1602,"inconclusive_share":0.0},{"name":"License","mean":9.0,"measured":1601,"inconclusive_share":0.0006},{"name":"Binary-Artifacts","mean":10.0,"measured":1602,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":10.0,"measured":1324,"inconclusive_share":0.1735},{"name":"Packaging","mean":10.0,"measured":44,"inconclusive_share":0.9725}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":174,"repositories":1641,"share":0.106,"share_of_record":0.106},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":15,"repositories":1555,"share":0.0096,"share_of_record":0.0091},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":1,"repositories":182,"share":0.0055,"share_of_record":0.0006},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":38,"share":0.0263,"share_of_record":0.0006}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[77,148,231,211,193,220,185,169,130,77]},{"key":"community","name":"Community & Adoption","bins":[2,23,97,324,423,386,258,97,24,7]},{"key":"governance","name":"Sustainability & Governance","bins":[0,0,11,84,153,483,595,235,77,3]},{"key":"engineering","name":"Engineering Quality","bins":[1,5,19,183,266,529,378,212,42,6]},{"key":"security","name":"Security","bins":[24,31,251,624,374,197,89,38,12,1]},{"key":"ai_readiness","name":"AI Readiness","bins":[14,79,119,561,469,209,103,62,18,7]}],"downloads_top1pct_share":0.6232}