{"ecosystem":"hex","ecosystem_label":"Hex","indexed_repositories":1267,"inspected_repositories":1267,"monthly_downloads":286531204,"median_score":51,"share_good_or_better":0.2226,"computed_at":"2026-09-06T13:26:08.519912Z","bands":[{"band":"exceptional","repositories":12,"monthly_downloads":110757675},{"band":"excellent","repositories":94,"monthly_downloads":90346897},{"band":"good","repositories":176,"monthly_downloads":18958851},{"band":"moderate","repositories":410,"monthly_downloads":38597739},{"band":"weak","repositories":388,"monthly_downloads":22037612},{"band":"at_risk","repositories":171,"monthly_downloads":5539329},{"band":"critical","repositories":16,"monthly_downloads":293101}],"histogram":[{"start":0,"count":0},{"start":5,"count":1},{"start":10,"count":6},{"start":15,"count":9},{"start":20,"count":36},{"start":25,"count":55},{"start":30,"count":80},{"start":35,"count":141},{"start":40,"count":113},{"start":45,"count":134},{"start":50,"count":163},{"start":55,"count":139},{"start":60,"count":108},{"start":65,"count":86},{"start":70,"count":49},{"start":75,"count":41},{"start":80,"count":60},{"start":85,"count":27},{"start":90,"count":14},{"start":95,"count":5}],"categories":[{"key":"vitality","name":"Vitality","median":49,"record_median":71,"repositories":1267},{"key":"community","name":"Community & Adoption","median":49,"record_median":46,"repositories":1267},{"key":"governance","name":"Sustainability & Governance","median":62,"record_median":59,"repositories":1267},{"key":"engineering","name":"Engineering Quality","median":55,"record_median":65,"repositories":1267},{"key":"security","name":"Security","median":39,"record_median":47,"repositories":1267},{"key":"ai_readiness","name":"AI Readiness","median":31,"record_median":53,"repositories":1267}],"practices":[{"key":"readme","label":"README","share":0.9763,"repositories":1267},{"key":"license","label":"License detected","share":0.9195,"repositories":1267},{"key":"ci","label":"CI workflows","share":0.8185,"repositories":1267},{"key":"tests","label":"Automated tests","share":0.9779,"repositories":1267},{"key":"linter","label":"Linter configuration","share":0.0253,"repositories":1267},{"key":"docs_dir","label":"Documentation directory","share":0.1287,"repositories":1267},{"key":"contributing","label":"Contributing guide","share":0.2013,"repositories":1267},{"key":"security_policy","label":"Security policy","share":0.0442,"repositories":1267},{"key":"code_of_conduct","label":"Code of conduct","share":0.165,"repositories":1267},{"key":"agent_instructions","label":"AI agent instructions","share":0.1215,"repositories":1267},{"key":"bootstrap","label":"One-command bootstrap","share":0.1413,"repositories":1267},{"key":"llms_txt","label":"llms.txt","share":0.0103,"repositories":1267}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":698,"median_score":57},{"key":"user","label":"Personal accounts","repositories":569,"median_score":44}],"bus_factor":[{"bucket":"1","repositories":1002},{"bucket":"2","repositories":182},{"bucket":"3–5","repositories":71},{"bucket":"6+","repositories":3}],"single_maintainer_share":0.7965,"single_maintainer_high_reliance":14,"licenses":[{"license":"MIT","state":"standard","repositories":626},{"license":"Apache-2.0","state":"standard","repositories":311},{"license":null,"state":"custom","repositories":185},{"license":null,"state":"absent","repositories":102},{"license":"BSD-2-Clause","state":"standard","repositories":11},{"license":"BSD-3-Clause","state":"standard","repositories":10},{"license":"AGPL-3.0","state":"standard","repositories":6},{"license":"ISC","state":"standard","repositories":4},{"license":"GPL-3.0","state":"standard","repositories":3},{"license":"GPL-2.0","state":"standard","repositories":2}],"ecosystems":[],"top_repositories":[{"id":24862,"full_name":"supabase/phoenix","url":"https://github.com/supabase/phoenix","description":"Peace of mind from prototype to production","ecosystem":"npm","ecosystems":["npm","hex"],"primary_language":"Elixir","languages":["Elixir","JavaScript"],"topics":[],"license_spdx":"MIT","license_state":"standard","stars":3,"forks":9,"watchers":0,"monthly_downloads":66850871,"latest_score":81,"latest_band":"excellent","latest_scanned_at":"2026-08-27T12:13:55.881872Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/supabase/phoenix?v=c759e91a-1","icon_source_type":"homepage","badge_url":""},{"id":8646,"full_name":"taskforcesh/bullmq","url":"https://github.com/taskforcesh/bullmq","description":"BullMQ - Message Queue and Batch processing for NodeJS, Python, .NET, Elixir, Rust and PHP based on Redis or PostgreSQL","ecosystem":"npm","ecosystems":["npm","pypi","hex","crates","packagist"],"primary_language":"TypeScript","languages":["TypeScript","Rust","Elixir"],"topics":["background-jobs","nodejs","queue","redis","typescript","python","elixir","php","rust","bull","bullmq","queues","jobs","background","job","worker","asynchronous","database"],"license_spdx":"MIT","license_state":"standard","stars":9336,"forks":672,"watchers":36,"monthly_downloads":36080972,"latest_score":99,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:15:56.470933Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/taskforcesh/bullmq?v=16978fb5-1","icon_source_type":"homepage","badge_url":""},{"id":1378,"full_name":"cucumber/messages","url":"https://github.com/cucumber/messages","description":"A message protocol for representing results and other information from Cucumber","ecosystem":"npm","ecosystems":["npm","packagist","hex","pypi","rubygems","go","maven"],"primary_language":"C#","languages":["C#","PHP","Java","C++","Dart"],"topics":["polyglot-release","dotnet","elixir","go","java","javascript","perl","php","ruby","tidelift","gherkin","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":41,"forks":24,"watchers":68,"monthly_downloads":34826805,"latest_score":95,"latest_band":"exceptional","latest_scanned_at":"2026-08-22T17:08:30.778181Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/messages?v=07b417f0-1","icon_source_type":"avatar","badge_url":""},{"id":26029,"full_name":"cucumber/gherkin","url":"https://github.com/cucumber/gherkin","description":"A parser and compiler for the Gherkin language.","ecosystem":"npm","ecosystems":["npm","pypi","packagist","hex","rubygems","go","maven"],"primary_language":"C","languages":["C"],"topics":["gherkin","polyglot-release","dart","dotnet","elixir","go","java","javascript","lexer","objective-c","parser","perl","php","python","ruby","tidelift","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":400,"forks":101,"watchers":91,"monthly_downloads":32511421,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:11:25.987179Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/gherkin?v=cf8da60d-1","icon_source_type":"readme","badge_url":""},{"id":30667,"full_name":"ethereum/c-kzg-4844","url":"https://github.com/ethereum/c-kzg-4844","description":"A minimal implementation of the Polynomial Commitments API for EIP-4844 and EIP-7594, written in C.","ecosystem":"pypi","ecosystems":["pypi","crates","go","hex"],"primary_language":"C","languages":["C","Rust"],"topics":[],"license_spdx":"Apache-2.0","license_state":"standard","stars":174,"forks":159,"watchers":14,"monthly_downloads":7391709,"latest_score":91,"latest_band":"excellent","latest_scanned_at":"2026-08-27T16:49:32.482347Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/ethereum/c-kzg-4844?v=918e9196-1","icon_source_type":"avatar","badge_url":""},{"id":278,"full_name":"phoenixframework/phoenix","url":"https://github.com/phoenixframework/phoenix","description":"Peace of mind from prototype to production","ecosystem":"npm","ecosystems":["npm","hex"],"primary_language":"Elixir","languages":["Elixir","JavaScript"],"topics":["elixir","web-framework","distributed","realtime","api-server"],"license_spdx":"MIT","license_state":"standard","stars":23107,"forks":3084,"watchers":537,"monthly_downloads":6068155,"latest_score":93,"latest_band":"exceptional","latest_scanned_at":"2026-08-05T03:42:48.830995Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/phoenixframework/phoenix?v=c759e91a-1","icon_source_type":"homepage","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":816,"median":48,"p25":36,"p75":59},{"label":"100 – 999","repositories":366,"median":54,"p25":44,"p75":65},{"label":"1,000 – 9,999","repositories":81,"median":75,"p25":58,"p75":84},{"label":"10,000 and more","repositories":4,"median":94,"p25":80,"p75":96}],"popularity_downloads":[{"label":"Under 10K / month","repositories":614,"median":48,"p25":36,"p75":59},{"label":"10K – 1M","repositories":514,"median":54,"p25":44,"p75":67},{"label":"1M – 100M","repositories":34,"median":73,"p25":51,"p75":83},{"label":"100M and more","repositories":0,"median":null,"p25":null,"p75":null}],"freshness":[{"label":"Pushed within 30 days","repositories":557},{"label":"31 – 90 days","repositories":236},{"label":"91 – 365 days","repositories":287},{"label":"Over a year","repositories":187}],"median_days_since_push":41,"dependencies":{"basis":953,"median_direct":0,"median_indirect":0,"median_total":0,"buckets":[{"label":"0","repositories":798},{"label":"1 – 5","repositories":10},{"label":"6 – 20","repositories":18},{"label":"21 – 50","repositories":31},{"label":"51 – 200","repositories":45},{"label":"201 – 500","repositories":21},{"label":"501 – 1,000","repositories":18},{"label":"Over 1,000","repositories":12}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":1253,"inconclusive_share":0.0008},{"name":"SAST","mean":0.4,"measured":1254,"inconclusive_share":0.0},{"name":"Signed-Releases","mean":0.4,"measured":99,"inconclusive_share":0.9211},{"name":"Branch-Protection","mean":0.6,"measured":923,"inconclusive_share":0.264},{"name":"Pinned-Dependencies","mean":0.8,"measured":1029,"inconclusive_share":0.1794},{"name":"Fuzzing","mean":1.0,"measured":1254,"inconclusive_share":0.0},{"name":"Security-Policy","mean":1.4,"measured":1254,"inconclusive_share":0.0},{"name":"Token-Permissions","mean":1.8,"measured":1025,"inconclusive_share":0.1826},{"name":"Code-Review","mean":2.2,"measured":1251,"inconclusive_share":0.0024},{"name":"Dependency-Update-Tool","mean":2.7,"measured":1254,"inconclusive_share":0.0},{"name":"Maintained","mean":3.8,"measured":1254,"inconclusive_share":0.0},{"name":"CI-Tests","mean":4.0,"measured":1101,"inconclusive_share":0.122},{"name":"Vulnerabilities","mean":6.2,"measured":1254,"inconclusive_share":0.0},{"name":"Contributors","mean":6.4,"measured":1254,"inconclusive_share":0.0},{"name":"License","mean":9.1,"measured":1254,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":10.0,"measured":1254,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":10.0,"measured":1025,"inconclusive_share":0.1826},{"name":"Packaging","mean":10.0,"measured":37,"inconclusive_share":0.9705}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":29,"repositories":1267,"share":0.0229,"share_of_record":0.0229},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":6,"repositories":1198,"share":0.005,"share_of_record":0.0047},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":39,"share":0.0256,"share_of_record":0.0008},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":0,"repositories":42,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[70,105,176,131,164,145,171,145,108,52]},{"key":"community","name":"Community & Adoption","bins":[1,11,59,249,320,306,209,84,23,5]},{"key":"governance","name":"Sustainability & Governance","bins":[0,0,5,49,92,343,457,233,79,9]},{"key":"engineering","name":"Engineering Quality","bins":[0,4,8,153,225,455,284,116,19,3]},{"key":"security","name":"Security","bins":[7,29,206,434,343,143,79,20,6,0]},{"key":"ai_readiness","name":"AI Readiness","bins":[2,25,528,379,138,90,56,37,10,2]}],"downloads_top1pct_share":0.6759}