{"ecosystem":"packagist","ecosystem_label":"Packagist","indexed_repositories":8850,"inspected_repositories":8850,"monthly_downloads":5333802774,"median_score":56,"share_good_or_better":0.3154,"computed_at":"2026-10-11T13:14:45.425796Z","bands":[{"band":"exceptional","repositories":144,"monthly_downloads":503687087},{"band":"excellent","repositories":948,"monthly_downloads":1817906773},{"band":"good","repositories":1699,"monthly_downloads":1095844215},{"band":"moderate","repositories":3161,"monthly_downloads":869674696},{"band":"weak","repositories":1828,"monthly_downloads":591137567},{"band":"at_risk","repositories":887,"monthly_downloads":410904144},{"band":"critical","repositories":183,"monthly_downloads":44648292}],"histogram":[{"start":0,"count":0},{"start":5,"count":24},{"start":10,"count":58},{"start":15,"count":101},{"start":20,"count":99},{"start":25,"count":287},{"start":30,"count":501},{"start":35,"count":510},{"start":40,"count":519},{"start":45,"count":799},{"start":50,"count":1369},{"start":55,"count":951},{"start":60,"count":841},{"start":65,"count":715},{"start":70,"count":425},{"start":75,"count":559},{"start":80,"count":502},{"start":85,"count":306},{"start":90,"count":220},{"start":95,"count":64}],"categories":[{"key":"vitality","name":"Vitality","median":62,"record_median":68,"repositories":8850},{"key":"community","name":"Community & Adoption","median":46,"record_median":45,"repositories":8850},{"key":"governance","name":"Sustainability & Governance","median":62,"record_median":58,"repositories":8850},{"key":"engineering","name":"Engineering Quality","median":62,"record_median":66,"repositories":8850},{"key":"security","name":"Security","median":42,"record_median":49,"repositories":8850},{"key":"ai_readiness","name":"AI Readiness","median":37,"record_median":56,"repositories":8850}],"practices":[{"key":"readme","label":"README","share":0.946,"repositories":8850},{"key":"license","label":"License detected","share":0.9031,"repositories":8850},{"key":"ci","label":"CI workflows","share":0.7669,"repositories":8850},{"key":"tests","label":"Automated tests","share":0.8112,"repositories":8850},{"key":"linter","label":"Linter configuration","share":0.4738,"repositories":8850},{"key":"docs_dir","label":"Documentation directory","share":0.2428,"repositories":8850},{"key":"contributing","label":"Contributing guide","share":0.4737,"repositories":8850},{"key":"security_policy","label":"Security policy","share":0.1708,"repositories":8850},{"key":"code_of_conduct","label":"Code of conduct","share":0.2119,"repositories":8850},{"key":"agent_instructions","label":"AI agent instructions","share":0.0991,"repositories":8850},{"key":"bootstrap","label":"One-command bootstrap","share":0.1058,"repositories":8850},{"key":"llms_txt","label":"llms.txt","share":0.2151,"repositories":8850}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":6895,"median_score":56},{"key":"user","label":"Personal accounts","repositories":1955,"median_score":54}],"bus_factor":[{"bucket":"1","repositories":5806},{"bucket":"2","repositories":1898},{"bucket":"3–5","repositories":992},{"bucket":"6+","repositories":129}],"single_maintainer_share":0.6579,"single_maintainer_high_reliance":426,"licenses":[{"license":"MIT","state":"standard","repositories":4498},{"license":null,"state":"custom","repositories":1594},{"license":null,"state":"absent","repositories":858},{"license":"BSD-3-Clause","state":"standard","repositories":590},{"license":"Apache-2.0","state":"standard","repositories":359},{"license":"GPL-2.0","state":"standard","repositories":348},{"license":"GPL-3.0","state":"standard","repositories":204},{"license":"LGPL-3.0","state":"standard","repositories":79},{"license":"AFL-3.0","state":"standard","repositories":65},{"license":"OSL-3.0","state":"standard","repositories":65}],"ecosystems":[],"top_repositories":[{"id":36259,"full_name":"handlebars-lang/handlebars.js","url":"https://github.com/handlebars-lang/handlebars.js","description":"Minimal templating on steroids.","ecosystem":"npm","ecosystems":["npm","rubygems","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["handlebars","mustache","templates","template","html"],"license_spdx":"MIT","license_state":"standard","stars":18673,"forks":2067,"watchers":438,"monthly_downloads":150441884,"latest_score":86,"latest_band":"excellent","latest_scanned_at":"2026-09-16T11:26:18.991664Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/handlebars-lang/handlebars.js?v=1a4cd4f8-1","icon_source_type":"avatar","badge_url":""},{"id":260,"full_name":"moment/moment","url":"https://github.com/moment/moment","description":"Parse, validate, manipulate, and display dates in javascript.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["moment","date","time","i18n","l10n","parse","format","validate","ender"],"license_spdx":"MIT","license_state":"standard","stars":47908,"forks":6977,"watchers":826,"monthly_downloads":136370488,"latest_score":88,"latest_band":"excellent","latest_scanned_at":"2026-09-16T11:43:47.306843Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/moment/moment?v=7ad18a2b-1","icon_source_type":"homepage","badge_url":""},{"id":57840,"full_name":"PrismJS/prism","url":"https://github.com/PrismJS/prism","description":"Lightweight, robust, elegant syntax highlighting.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["prism","highlight"],"license_spdx":"MIT","license_state":"standard","stars":13039,"forks":1389,"watchers":120,"monthly_downloads":110472083,"latest_score":83,"latest_band":"excellent","latest_scanned_at":"2026-09-17T15:34:01.574801Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/PrismJS/prism?v=14583995-1","icon_source_type":"homepage","badge_url":""},{"id":39586,"full_name":"moment/moment-timezone","url":"https://github.com/moment/moment-timezone","description":"Timezone support for moment.js","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["moment","date","time","timezone","olson","iana","zone","tz"],"license_spdx":"MIT","license_state":"standard","stars":3878,"forks":839,"watchers":92,"monthly_downloads":68871480,"latest_score":83,"latest_band":"excellent","latest_scanned_at":"2026-09-16T12:35:22.842977Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/moment/moment-timezone?v=10937095-1","icon_source_type":"homepage","badge_url":""},{"id":15887,"full_name":"swagger-api/swagger-ui","url":"https://github.com/swagger-api/swagger-ui","description":"Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["swagger","swagger-ui","swagger-api","rest","rest-api","openapi-specification","oas","openapi","openapi3","hacktoberfest","openapi31","open-source","swagger-oss","openapi32","swagger-client","documentation","ui","api","specification"],"license_spdx":"Apache-2.0","license_state":"standard","stars":29013,"forks":9254,"watchers":623,"monthly_downloads":49829467,"latest_score":99,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T18:07:06.317919Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/swagger-api/swagger-ui?v=97413946-1","icon_source_type":"homepage","badge_url":""},{"id":79,"full_name":"chartjs/Chart.js","url":"https://github.com/chartjs/Chart.js","description":"Simple HTML5 Charts using the <canvas> tag","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript","TypeScript"],"topics":["javascript","chart","html5","canvas","graph","html5-charts","charts","data","graphs","responsive"],"license_spdx":"MIT","license_state":"standard","stars":67695,"forks":11934,"watchers":1346,"monthly_downloads":48110339,"latest_score":90,"latest_band":"excellent","latest_scanned_at":"2026-09-16T14:42:52.928660Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/chartjs/Chart.js?v=39181fe2-1","icon_source_type":"homepage","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":6550,"median":53,"p25":44,"p75":63},{"label":"100 – 999","repositories":1551,"median":65,"p25":53,"p75":78},{"label":"1,000 – 9,999","repositories":672,"median":77,"p25":60,"p75":88},{"label":"10,000 and more","repositories":77,"median":89,"p25":82,"p75":94}],"popularity_downloads":[{"label":"Under 10K / month","repositories":3718,"median":53,"p25":42,"p75":63},{"label":"10K – 1M","repositories":4227,"median":57,"p25":47,"p75":71},{"label":"1M – 100M","repositories":694,"median":71,"p25":51,"p75":84},{"label":"100M and more","repositories":3,"median":86,"p25":83,"p75":88}],"freshness":[{"label":"Pushed within 30 days","repositories":6343},{"label":"31 – 90 days","repositories":1516},{"label":"91 – 365 days","repositories":690},{"label":"Over a year","repositories":301}],"median_days_since_push":6,"dependencies":{"basis":7435,"median_direct":2,"median_indirect":7,"median_total":11,"buckets":[{"label":"0","repositories":137},{"label":"1 – 5","repositories":1645},{"label":"6 – 20","repositories":3405},{"label":"21 – 50","repositories":862},{"label":"51 – 200","repositories":832},{"label":"201 – 500","repositories":216},{"label":"501 – 1,000","repositories":170},{"label":"Over 1,000","repositories":168}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":8793,"inconclusive_share":0.0026},{"name":"Fuzzing","mean":0.0,"measured":8806,"inconclusive_share":0.0011},{"name":"SAST","mean":0.5,"measured":8809,"inconclusive_share":0.0008},{"name":"Signed-Releases","mean":0.9,"measured":436,"inconclusive_share":0.9505},{"name":"Pinned-Dependencies","mean":1.0,"measured":2802,"inconclusive_share":0.6822},{"name":"Branch-Protection","mean":1.3,"measured":6571,"inconclusive_share":0.2547},{"name":"Token-Permissions","mean":1.4,"measured":2667,"inconclusive_share":0.6975},{"name":"Code-Review","mean":1.8,"measured":8754,"inconclusive_share":0.007},{"name":"Security-Policy","mean":2.4,"measured":8816,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":3.1,"measured":8816,"inconclusive_share":0.0},{"name":"Maintained","mean":4.2,"measured":8816,"inconclusive_share":0.0},{"name":"CI-Tests","mean":5.2,"measured":5790,"inconclusive_share":0.3432},{"name":"Contributors","mean":7.4,"measured":8815,"inconclusive_share":0.0001},{"name":"License","mean":8.9,"measured":8815,"inconclusive_share":0.0001},{"name":"Vulnerabilities","mean":9.2,"measured":8816,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.8,"measured":2667,"inconclusive_share":0.6975},{"name":"Binary-Artifacts","mean":10.0,"measured":8816,"inconclusive_share":0.0},{"name":"Packaging","mean":10.0,"measured":135,"inconclusive_share":0.9847}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":504,"repositories":8850,"share":0.0569,"share_of_record":0.0569},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":283,"repositories":8572,"share":0.033,"share_of_record":0.032},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":10,"repositories":2344,"share":0.0043,"share_of_record":0.0011},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":0,"repositories":160,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[6,184,328,524,1003,1742,1983,1518,1065,497]},{"key":"community","name":"Community & Adoption","bins":[14,100,805,1688,2540,1538,1079,622,370,94]},{"key":"governance","name":"Sustainability & Governance","bins":[0,2,22,436,821,2370,3015,1542,605,37]},{"key":"engineering","name":"Engineering Quality","bins":[115,145,454,747,1039,1499,1739,1955,932,225]},{"key":"security","name":"Security","bins":[43,31,740,2943,2273,1470,985,310,53,2]},{"key":"ai_readiness","name":"AI Readiness","bins":[161,647,1870,2584,2024,844,435,201,71,13]}],"downloads_top1pct_share":0.3974}