{"ecosystem":"hex","ecosystem_label":"Hex","indexed_repositories":1624,"inspected_repositories":1624,"monthly_downloads":332958984,"median_score":50,"share_good_or_better":0.2229,"computed_at":"2026-10-16T10:52:28.371965Z","bands":[{"band":"exceptional","repositories":12,"monthly_downloads":117485707},{"band":"excellent","repositories":121,"monthly_downloads":97355032},{"band":"good","repositories":229,"monthly_downloads":21873014},{"band":"moderate","repositories":475,"monthly_downloads":49892109},{"band":"weak","repositories":450,"monthly_downloads":26729500},{"band":"at_risk","repositories":300,"monthly_downloads":18971624},{"band":"critical","repositories":37,"monthly_downloads":651998}],"histogram":[{"start":0,"count":0},{"start":5,"count":0},{"start":10,"count":8},{"start":15,"count":29},{"start":20,"count":61},{"start":25,"count":116},{"start":30,"count":123},{"start":35,"count":158},{"start":40,"count":132},{"start":45,"count":160},{"start":50,"count":216},{"start":55,"count":156},{"start":60,"count":103},{"start":65,"count":119},{"start":70,"count":53},{"start":75,"count":57},{"start":80,"count":62},{"start":85,"count":43},{"start":90,"count":20},{"start":95,"count":8}],"categories":[{"key":"vitality","name":"Vitality","median":47,"record_median":68,"repositories":1624},{"key":"community","name":"Community & Adoption","median":48,"record_median":45,"repositories":1624},{"key":"governance","name":"Sustainability & Governance","median":61,"record_median":58,"repositories":1624},{"key":"engineering","name":"Engineering Quality","median":56,"record_median":66,"repositories":1624},{"key":"security","name":"Security","median":38,"record_median":49,"repositories":1624},{"key":"ai_readiness","name":"AI Readiness","median":40,"record_median":56,"repositories":1624}],"practices":[{"key":"readme","label":"README","share":0.9754,"repositories":1624},{"key":"license","label":"License detected","share":0.9064,"repositories":1624},{"key":"ci","label":"CI workflows","share":0.8264,"repositories":1624},{"key":"tests","label":"Automated tests","share":0.9643,"repositories":1624},{"key":"linter","label":"Linter configuration","share":0.0308,"repositories":1624},{"key":"docs_dir","label":"Documentation directory","share":0.2321,"repositories":1624},{"key":"contributing","label":"Contributing guide","share":0.1995,"repositories":1624},{"key":"security_policy","label":"Security policy","share":0.0486,"repositories":1624},{"key":"code_of_conduct","label":"Code of conduct","share":0.1601,"repositories":1624},{"key":"agent_instructions","label":"AI agent instructions","share":0.1275,"repositories":1624},{"key":"bootstrap","label":"One-command bootstrap","share":0.1903,"repositories":1624},{"key":"llms_txt","label":"llms.txt","share":0.0831,"repositories":1624}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":865,"median_score":56},{"key":"user","label":"Personal accounts","repositories":759,"median_score":44}],"bus_factor":[{"bucket":"1","repositories":1313},{"bucket":"2","repositories":214},{"bucket":"3–5","repositories":83},{"bucket":"6+","repositories":4}],"single_maintainer_share":0.8135,"single_maintainer_high_reliance":27,"licenses":[{"license":"MIT","state":"standard","repositories":727},{"license":"Apache-2.0","state":"standard","repositories":468},{"license":null,"state":"custom","repositories":221},{"license":null,"state":"absent","repositories":152},{"license":"BSD-2-Clause","state":"standard","repositories":12},{"license":"BSD-3-Clause","state":"standard","repositories":12},{"license":"ISC","state":"standard","repositories":9},{"license":"AGPL-3.0","state":"standard","repositories":7},{"license":"GPL-3.0","state":"standard","repositories":4},{"license":"GPL-2.0","state":"standard","repositories":3}],"ecosystems":[],"top_repositories":[{"id":24862,"full_name":"supabase/phoenix","url":"https://github.com/supabase/phoenix","description":"Peace of mind from prototype to production","ecosystem":"npm","ecosystems":["npm","hex"],"primary_language":"Elixir","languages":["Elixir","JavaScript"],"topics":[],"license_spdx":"MIT","license_state":"standard","stars":3,"forks":9,"watchers":0,"monthly_downloads":66850871,"latest_score":81,"latest_band":"excellent","latest_scanned_at":"2026-08-27T12:13:55.881872Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/supabase/phoenix?v=c759e91a-1","icon_source_type":"homepage","badge_url":""},{"id":8646,"full_name":"taskforcesh/bullmq","url":"https://github.com/taskforcesh/bullmq","description":"BullMQ - Message Queue and Batch processing for NodeJS, Python, .NET, Elixir, Rust and PHP based on Redis or PostgreSQL","ecosystem":"npm","ecosystems":["npm","pypi","hex","crates","packagist"],"primary_language":"TypeScript","languages":["TypeScript","Rust","Elixir"],"topics":["background-jobs","nodejs","queue","redis","typescript","python","elixir","php","rust","bull","bullmq","queues","jobs","background","job","worker","asynchronous","database"],"license_spdx":"MIT","license_state":"standard","stars":9336,"forks":672,"watchers":36,"monthly_downloads":36080972,"latest_score":99,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:15:56.470933Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/taskforcesh/bullmq?v=16978fb5-1","icon_source_type":"homepage","badge_url":""},{"id":1378,"full_name":"cucumber/messages","url":"https://github.com/cucumber/messages","description":"A message protocol for representing results and other information from Cucumber","ecosystem":"npm","ecosystems":["npm","packagist","hex","pypi","rubygems","go","maven"],"primary_language":"C#","languages":["C#","PHP","Java","C++","Dart"],"topics":["polyglot-release","dotnet","elixir","go","java","javascript","perl","php","ruby","tidelift","gherkin","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":41,"forks":24,"watchers":68,"monthly_downloads":34826805,"latest_score":95,"latest_band":"exceptional","latest_scanned_at":"2026-08-22T17:08:30.778181Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/messages?v=07b417f0-1","icon_source_type":"avatar","badge_url":""},{"id":26029,"full_name":"cucumber/gherkin","url":"https://github.com/cucumber/gherkin","description":"A parser and compiler for the Gherkin language.","ecosystem":"npm","ecosystems":["npm","pypi","packagist","hex","rubygems","go","maven"],"primary_language":"C","languages":["C"],"topics":["gherkin","polyglot-release","dart","dotnet","elixir","go","java","javascript","lexer","objective-c","parser","perl","php","python","ruby","tidelift","cucumber","bdd"],"license_spdx":"MIT","license_state":"standard","stars":400,"forks":101,"watchers":91,"monthly_downloads":32511421,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-08-27T13:11:25.987179Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/cucumber/gherkin?v=cf8da60d-1","icon_source_type":"readme","badge_url":""},{"id":30667,"full_name":"ethereum/c-kzg-4844","url":"https://github.com/ethereum/c-kzg-4844","description":"A minimal implementation of the Polynomial Commitments API for EIP-4844 and EIP-7594, written in C.","ecosystem":"pypi","ecosystems":["pypi","crates","go","hex"],"primary_language":"C","languages":["C","Rust"],"topics":[],"license_spdx":"Apache-2.0","license_state":"standard","stars":174,"forks":159,"watchers":14,"monthly_downloads":7391709,"latest_score":91,"latest_band":"excellent","latest_scanned_at":"2026-08-27T16:49:32.482347Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/ethereum/c-kzg-4844?v=918e9196-1","icon_source_type":"avatar","badge_url":""},{"id":278,"full_name":"phoenixframework/phoenix","url":"https://github.com/phoenixframework/phoenix","description":"Peace of mind from prototype to production","ecosystem":"npm","ecosystems":["npm","hex"],"primary_language":"Elixir","languages":["Elixir","JavaScript"],"topics":["elixir","web-framework","distributed","realtime","api-server"],"license_spdx":"MIT","license_state":"standard","stars":23156,"forks":3110,"watchers":538,"monthly_downloads":6597997,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T19:41:34.574031Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/phoenixframework/phoenix?v=6e581290-1","icon_source_type":"tree","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":1097,"median":45,"p25":34,"p75":57},{"label":"100 – 999","repositories":435,"median":54,"p25":44,"p75":69},{"label":"1,000 – 9,999","repositories":86,"median":75,"p25":58,"p75":86},{"label":"10,000 and more","repositories":6,"median":96,"p25":89,"p75":96}],"popularity_downloads":[{"label":"Under 10K / month","repositories":815,"median":47,"p25":35,"p75":59},{"label":"10K – 1M","repositories":603,"median":53,"p25":41,"p75":67},{"label":"1M – 100M","repositories":49,"median":62,"p25":48,"p75":82},{"label":"100M and more","repositories":0,"median":null,"p25":null,"p75":null}],"freshness":[{"label":"Pushed within 30 days","repositories":638},{"label":"31 – 90 days","repositories":305},{"label":"91 – 365 days","repositories":430},{"label":"Over a year","repositories":251}],"median_days_since_push":56,"dependencies":{"basis":1215,"median_direct":0,"median_indirect":0,"median_total":0,"buckets":[{"label":"0","repositories":1032},{"label":"1 – 5","repositories":12},{"label":"6 – 20","repositories":24},{"label":"21 – 50","repositories":37},{"label":"51 – 200","repositories":51},{"label":"201 – 500","repositories":24},{"label":"501 – 1,000","repositories":19},{"label":"Over 1,000","repositories":16}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":1588,"inconclusive_share":0.0},{"name":"SAST","mean":0.4,"measured":1571,"inconclusive_share":0.0107},{"name":"Signed-Releases","mean":0.4,"measured":121,"inconclusive_share":0.9238},{"name":"Branch-Protection","mean":0.6,"measured":1218,"inconclusive_share":0.233},{"name":"Pinned-Dependencies","mean":0.8,"measured":1314,"inconclusive_share":0.1725},{"name":"Fuzzing","mean":1.1,"measured":1587,"inconclusive_share":0.0006},{"name":"Security-Policy","mean":1.3,"measured":1588,"inconclusive_share":0.0},{"name":"Token-Permissions","mean":1.7,"measured":1311,"inconclusive_share":0.1744},{"name":"Code-Review","mean":2.2,"measured":1582,"inconclusive_share":0.0038},{"name":"Dependency-Update-Tool","mean":2.4,"measured":1588,"inconclusive_share":0.0},{"name":"Maintained","mean":3.3,"measured":1588,"inconclusive_share":0.0},{"name":"CI-Tests","mean":4.0,"measured":1350,"inconclusive_share":0.1499},{"name":"Contributors","mean":6.4,"measured":1587,"inconclusive_share":0.0006},{"name":"Vulnerabilities","mean":6.9,"measured":1588,"inconclusive_share":0.0},{"name":"License","mean":9.0,"measured":1587,"inconclusive_share":0.0006},{"name":"Binary-Artifacts","mean":10.0,"measured":1588,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":10.0,"measured":1311,"inconclusive_share":0.1744},{"name":"Packaging","mean":10.0,"measured":42,"inconclusive_share":0.9736}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":173,"repositories":1624,"share":0.1065,"share_of_record":0.1065},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":13,"repositories":1536,"share":0.0085,"share_of_record":0.008},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":1,"repositories":181,"share":0.0055,"share_of_record":0.0006},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":38,"share":0.0263,"share_of_record":0.0006}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[77,147,229,210,190,219,181,166,130,75]},{"key":"community","name":"Community & Adoption","bins":[2,23,96,320,416,381,257,98,24,7]},{"key":"governance","name":"Sustainability & Governance","bins":[0,0,11,83,150,477,587,236,77,3]},{"key":"engineering","name":"Engineering Quality","bins":[1,6,17,182,264,526,375,208,40,5]},{"key":"security","name":"Security","bins":[22,31,250,617,368,196,92,36,12,0]},{"key":"ai_readiness","name":"AI Readiness","bins":[14,78,115,557,469,205,101,62,18,5]}],"downloads_top1pct_share":0.6301}