{"ecosystem":"maven","ecosystem_label":"Maven","indexed_repositories":2225,"inspected_repositories":2225,"monthly_downloads":996355307,"median_score":71,"share_good_or_better":0.5982,"computed_at":"2026-09-06T16:16:55.122574Z","bands":[{"band":"exceptional","repositories":274,"monthly_downloads":695519229},{"band":"excellent","repositories":590,"monthly_downloads":244888159},{"band":"good","repositories":467,"monthly_downloads":11949876},{"band":"moderate","repositories":391,"monthly_downloads":2951184},{"band":"weak","repositories":185,"monthly_downloads":2214508},{"band":"at_risk","repositories":207,"monthly_downloads":37990842},{"band":"critical","repositories":111,"monthly_downloads":841509}],"histogram":[{"start":0,"count":7},{"start":5,"count":8},{"start":10,"count":29},{"start":15,"count":67},{"start":20,"count":55},{"start":25,"count":62},{"start":30,"count":90},{"start":35,"count":59},{"start":40,"count":58},{"start":45,"count":68},{"start":50,"count":133},{"start":55,"count":132},{"start":60,"count":126},{"start":65,"count":169},{"start":70,"count":116},{"start":75,"count":182},{"start":80,"count":262},{"start":85,"count":197},{"start":90,"count":242},{"start":95,"count":163}],"categories":[{"key":"vitality","name":"Vitality","median":79,"record_median":71,"repositories":2225},{"key":"community","name":"Community & Adoption","median":57,"record_median":46,"repositories":2225},{"key":"governance","name":"Sustainability & Governance","median":66,"record_median":59,"repositories":2225},{"key":"engineering","name":"Engineering Quality","median":66,"record_median":65,"repositories":2225},{"key":"security","name":"Security","median":52,"record_median":47,"repositories":2225},{"key":"ai_readiness","name":"AI Readiness","median":59,"record_median":53,"repositories":2225}],"practices":[{"key":"readme","label":"README","share":0.9465,"repositories":2225},{"key":"license","label":"License detected","share":0.9353,"repositories":2225},{"key":"ci","label":"CI workflows","share":0.8225,"repositories":2225},{"key":"tests","label":"Automated tests","share":0.9196,"repositories":2225},{"key":"linter","label":"Linter configuration","share":0.227,"repositories":2225},{"key":"docs_dir","label":"Documentation directory","share":0.4243,"repositories":2225},{"key":"contributing","label":"Contributing guide","share":0.458,"repositories":2225},{"key":"security_policy","label":"Security policy","share":0.2319,"repositories":2225},{"key":"code_of_conduct","label":"Code of conduct","share":0.3097,"repositories":2225},{"key":"agent_instructions","label":"AI agent instructions","share":0.2984,"repositories":2225},{"key":"bootstrap","label":"One-command bootstrap","share":0.1735,"repositories":2225},{"key":"llms_txt","label":"llms.txt","share":0.0724,"repositories":2225}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":1698,"median_score":77},{"key":"user","label":"Personal accounts","repositories":527,"median_score":54}],"bus_factor":[{"bucket":"1","repositories":1323},{"bucket":"2","repositories":471},{"bucket":"3–5","repositories":328},{"bucket":"6+","repositories":91}],"single_maintainer_share":0.5978,"single_maintainer_high_reliance":12,"licenses":[{"license":"Apache-2.0","state":"standard","repositories":1035},{"license":"MIT","state":"standard","repositories":465},{"license":null,"state":"custom","repositories":272},{"license":null,"state":"absent","repositories":144},{"license":"GPL-3.0","state":"standard","repositories":82},{"license":"AGPL-3.0","state":"standard","repositories":47},{"license":"BSD-3-Clause","state":"standard","repositories":35},{"license":"EPL-2.0","state":"standard","repositories":31},{"license":"MPL-2.0","state":"standard","repositories":26},{"license":"LGPL-3.0","state":"standard","repositories":22}],"ecosystems":[],"top_repositories":[{"id":372,"full_name":"react/react-native","url":"https://github.com/react/react-native","description":"A framework for building native applications using React","ecosystem":"npm","ecosystems":["npm","maven","rubygems"],"primary_language":"C++","languages":["C++","Kotlin","JavaScript"],"topics":["android","app-framework","ios","mobile","mobile-development","react-native","cross-platform","react","polyfill","polyfills","js","js-polyfills","jest","preset","metro","config","gradle","plugin","tools"],"license_spdx":"MIT","license_state":"standard","stars":126283,"forks":25198,"watchers":3523,"monthly_downloads":178307065,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T22:06:08.597087Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/react/react-native?v=74e41fe8-1","icon_source_type":"homepage","badge_url":""},{"id":29,"full_name":"pytorch/pytorch","url":"https://github.com/pytorch/pytorch","description":"Tensors and Dynamic neural networks in Python with strong GPU acceleration","ecosystem":"pypi","ecosystems":["pypi","maven"],"primary_language":"Python","languages":["Python","C++"],"topics":["neural-network","autograd","gpu","numpy","deep-learning","tensor","python","machine-learning","pytorch"],"license_spdx":null,"license_state":"custom","stars":102182,"forks":28709,"watchers":1807,"monthly_downloads":95610864,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-04T22:23:17.121489Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/pytorch/pytorch?v=b126ab63-1","icon_source_type":"homepage","badge_url":""},{"id":9156,"full_name":"microsoft/onnxruntime","url":"https://github.com/microsoft/onnxruntime","description":"ONNX Runtime: cross-platform, high performance ML inferencing and training accelerator","ecosystem":"npm","ecosystems":["npm","crates","maven","pypi"],"primary_language":"C++","languages":["C++"],"topics":["deep-learning","onnx","neural-networks","machine-learning","ai-framework","hardware-acceleration","pytorch","tensorflow","scikit-learn","onnxruntime","onnx-runtime","react-native","ios","android"],"license_spdx":"MIT","license_state":"standard","stars":21274,"forks":4092,"watchers":262,"monthly_downloads":52750295,"latest_score":100,"latest_band":"exceptional","latest_scanned_at":"2026-08-05T04:18:33.252275Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/microsoft/onnxruntime?v=ad26ab40-1","icon_source_type":"avatar","badge_url":""},{"id":2339,"full_name":"ionic-team/capacitor","url":"https://github.com/ionic-team/capacitor","description":"Build cross-platform Native Progressive Web Apps for iOS, Android, and the Web ⚡️","ecosystem":"npm","ecosystems":["npm","maven"],"primary_language":"TypeScript","languages":["TypeScript","Java","Swift"],"topics":["javascript","html","css","swift","java","cross-platform","capacitor","cordova","ionic","ios","android","pwa","ionic-framework","universal-app","progressive-web-apps"],"license_spdx":"MIT","license_state":"standard","stars":16230,"forks":1224,"watchers":165,"monthly_downloads":49320726,"latest_score":94,"latest_band":"exceptional","latest_scanned_at":"2026-08-05T05:51:53.764042Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/ionic-team/capacitor?v=564b624a-1","icon_source_type":"homepage","badge_url":""},{"id":2862,"full_name":"smithy-lang/smithy-rs","url":"https://github.com/smithy-lang/smithy-rs","description":"Code generation for the AWS SDK for Rust, as well as server and generic smithy client generation.","ecosystem":"crates","ecosystems":["crates","maven"],"primary_language":"Rust","languages":["Rust","Kotlin"],"topics":["aws","aws-sdk-rust","rust"],"license_spdx":"Apache-2.0","license_state":"standard","stars":657,"forks":264,"watchers":21,"monthly_downloads":40688220,"latest_score":96,"latest_band":"exceptional","latest_scanned_at":"2026-08-23T00:03:09.866206Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/smithy-lang/smithy-rs?v=590b7f54-1","icon_source_type":"avatar","badge_url":""},{"id":35904,"full_name":"appandflow/react-native-safe-area-context","url":"https://github.com/appandflow/react-native-safe-area-context","description":"A flexible way to handle safe area insets in JS. Also works on Android and Web! ","ecosystem":"npm","ecosystems":["npm","maven","rubygems"],"primary_language":"TypeScript","languages":["TypeScript","Objective-C","Kotlin"],"topics":["react-native","ios","android","web","react","safeareainsets","react-native-web","expo-web","safe-area","view"],"license_spdx":"MIT","license_state":"standard","stars":2753,"forks":256,"watchers":13,"monthly_downloads":35558033,"latest_score":88,"latest_band":"excellent","latest_scanned_at":"2026-08-27T13:05:50.483821Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/appandflow/react-native-safe-area-context?v=cbb9a8af-1","icon_source_type":"avatar","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":1114,"median":60,"p25":44,"p75":75},{"label":"100 – 999","repositories":551,"median":80,"p25":65,"p75":88},{"label":"1,000 – 9,999","repositories":388,"median":88,"p25":75,"p75":94},{"label":"10,000 and more","repositories":172,"median":90,"p25":62,"p75":96}],"popularity_downloads":[{"label":"Under 10K / month","repositories":212,"median":61,"p25":50,"p75":80},{"label":"10K – 1M","repositories":175,"median":80,"p25":69,"p75":90},{"label":"1M – 100M","repositories":47,"median":92,"p25":86,"p75":96},{"label":"100M and more","repositories":1,"median":96,"p25":96,"p75":96}],"freshness":[{"label":"Pushed within 30 days","repositories":1841},{"label":"31 – 90 days","repositories":108},{"label":"91 – 365 days","repositories":94},{"label":"Over a year","repositories":182}],"median_days_since_push":2,"dependencies":{"basis":1850,"median_direct":8,"median_indirect":41,"median_total":81,"buckets":[{"label":"0","repositories":304},{"label":"1 – 5","repositories":56},{"label":"6 – 20","repositories":188},{"label":"21 – 50","repositories":230},{"label":"51 – 200","repositories":433},{"label":"201 – 500","repositories":211},{"label":"501 – 1,000","repositories":151},{"label":"Over 1,000","repositories":277}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.1,"measured":2175,"inconclusive_share":0.0014},{"name":"Fuzzing","mean":0.6,"measured":2177,"inconclusive_share":0.0005},{"name":"Signed-Releases","mean":0.7,"measured":597,"inconclusive_share":0.7259},{"name":"Branch-Protection","mean":1.4,"measured":1447,"inconclusive_share":0.3356},{"name":"Pinned-Dependencies","mean":1.7,"measured":1838,"inconclusive_share":0.1561},{"name":"Token-Permissions","mean":1.9,"measured":1779,"inconclusive_share":0.1832},{"name":"SAST","mean":2.3,"measured":2175,"inconclusive_share":0.0014},{"name":"Code-Review","mean":3.0,"measured":2168,"inconclusive_share":0.0046},{"name":"Security-Policy","mean":3.4,"measured":2178,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":5.4,"measured":2178,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":5.5,"measured":2178,"inconclusive_share":0.0},{"name":"CI-Tests","mean":7.0,"measured":1726,"inconclusive_share":0.2075},{"name":"Maintained","mean":7.1,"measured":2178,"inconclusive_share":0.0},{"name":"Contributors","mean":7.4,"measured":2178,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":8.7,"measured":2174,"inconclusive_share":0.0018},{"name":"License","mean":9.2,"measured":2178,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.5,"measured":1779,"inconclusive_share":0.1832},{"name":"Packaging","mean":10.0,"measured":815,"inconclusive_share":0.6258}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":184,"repositories":2225,"share":0.0827,"share_of_record":0.0827},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":49,"repositories":2053,"share":0.0239,"share_of_record":0.022},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":3,"repositories":1319,"share":0.0023,"share_of_record":0.0013},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":1,"repositories":76,"share":0.0132,"share_of_record":0.0004}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[37,95,114,88,72,144,203,370,438,664]},{"key":"community","name":"Community & Adoption","bins":[17,98,212,264,275,330,306,324,261,138]},{"key":"governance","name":"Sustainability & Governance","bins":[0,15,43,138,213,385,494,528,320,89]},{"key":"engineering","name":"Engineering Quality","bins":[6,10,56,148,217,310,568,508,289,113]},{"key":"security","name":"Security","bins":[23,39,151,305,430,554,430,220,62,11]},{"key":"ai_readiness","name":"AI Readiness","bins":[7,10,35,101,393,578,469,331,233,68]}],"downloads_top1pct_share":0.856}