{"ecosystem":"packagist","ecosystem_label":"Packagist","indexed_repositories":9490,"inspected_repositories":9490,"monthly_downloads":6704690551,"median_score":56,"share_good_or_better":0.3113,"computed_at":"2026-10-24T06:30:02.734933Z","bands":[{"band":"exceptional","repositories":152,"monthly_downloads":595318418},{"band":"excellent","repositories":994,"monthly_downloads":2275832294},{"band":"good","repositories":1808,"monthly_downloads":1441100250},{"band":"moderate","repositories":3303,"monthly_downloads":1112968947},{"band":"weak","repositories":1973,"monthly_downloads":751441057},{"band":"at_risk","repositories":1054,"monthly_downloads":478769852},{"band":"critical","repositories":206,"monthly_downloads":49259733}],"histogram":[{"start":0,"count":0},{"start":5,"count":28},{"start":10,"count":62},{"start":15,"count":116},{"start":20,"count":128},{"start":25,"count":331},{"start":30,"count":595},{"start":35,"count":502},{"start":40,"count":578},{"start":45,"count":893},{"start":50,"count":1422},{"start":55,"count":971},{"start":60,"count":910},{"start":65,"count":757},{"start":70,"count":455},{"start":75,"count":596},{"start":80,"count":527},{"start":85,"count":317},{"start":90,"count":236},{"start":95,"count":66}],"categories":[{"key":"vitality","name":"Vitality","median":62,"record_median":68,"repositories":9490},{"key":"community","name":"Community & Adoption","median":46,"record_median":44,"repositories":9490},{"key":"governance","name":"Sustainability & Governance","median":61,"record_median":58,"repositories":9490},{"key":"engineering","name":"Engineering Quality","median":62,"record_median":66,"repositories":9490},{"key":"security","name":"Security","median":42,"record_median":49,"repositories":9490},{"key":"ai_readiness","name":"AI Readiness","median":37,"record_median":57,"repositories":9490}],"practices":[{"key":"readme","label":"README","share":0.9396,"repositories":9490},{"key":"license","label":"License detected","share":0.9015,"repositories":9490},{"key":"ci","label":"CI workflows","share":0.7643,"repositories":9490},{"key":"tests","label":"Automated tests","share":0.8154,"repositories":9490},{"key":"linter","label":"Linter configuration","share":0.4726,"repositories":9490},{"key":"docs_dir","label":"Documentation directory","share":0.2502,"repositories":9490},{"key":"contributing","label":"Contributing guide","share":0.4674,"repositories":9490},{"key":"security_policy","label":"Security policy","share":0.1697,"repositories":9490},{"key":"code_of_conduct","label":"Code of conduct","share":0.2058,"repositories":9490},{"key":"agent_instructions","label":"AI agent instructions","share":0.1012,"repositories":9490},{"key":"bootstrap","label":"One-command bootstrap","share":0.1054,"repositories":9490},{"key":"llms_txt","label":"llms.txt","share":0.2336,"repositories":9490}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":7303,"median_score":56},{"key":"user","label":"Personal accounts","repositories":2187,"median_score":54}],"bus_factor":[{"bucket":"1","repositories":6311},{"bucket":"2","repositories":1984},{"bucket":"3–5","repositories":1036},{"bucket":"6+","repositories":131}],"single_maintainer_share":0.667,"single_maintainer_high_reliance":442,"licenses":[{"license":"MIT","state":"standard","repositories":4922},{"license":null,"state":"custom","repositories":1645},{"license":null,"state":"absent","repositories":935},{"license":"BSD-3-Clause","state":"standard","repositories":595},{"license":"Apache-2.0","state":"standard","repositories":379},{"license":"GPL-2.0","state":"standard","repositories":377},{"license":"GPL-3.0","state":"standard","repositories":216},{"license":"LGPL-3.0","state":"standard","repositories":81},{"license":"AGPL-3.0","state":"standard","repositories":69},{"license":"OSL-3.0","state":"standard","repositories":69}],"ecosystems":[],"top_repositories":[{"id":36259,"full_name":"handlebars-lang/handlebars.js","url":"https://github.com/handlebars-lang/handlebars.js","description":"Minimal templating on steroids.","ecosystem":"npm","ecosystems":["npm","rubygems","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["handlebars","mustache","templates","template","html"],"license_spdx":"MIT","license_state":"standard","stars":18673,"forks":2067,"watchers":438,"monthly_downloads":150441884,"latest_score":86,"latest_band":"excellent","latest_scanned_at":"2026-09-16T11:26:18.991664Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/handlebars-lang/handlebars.js?v=1a4cd4f8-1","icon_source_type":"avatar","badge_url":""},{"id":260,"full_name":"moment/moment","url":"https://github.com/moment/moment","description":"Parse, validate, manipulate, and display dates in javascript.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["moment","date","time","i18n","l10n","parse","format","validate","ender"],"license_spdx":"MIT","license_state":"standard","stars":47908,"forks":6977,"watchers":826,"monthly_downloads":136370488,"latest_score":88,"latest_band":"excellent","latest_scanned_at":"2026-09-16T11:43:47.306843Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/moment/moment?v=7ad18a2b-1","icon_source_type":"homepage","badge_url":""},{"id":57840,"full_name":"PrismJS/prism","url":"https://github.com/PrismJS/prism","description":"Lightweight, robust, elegant syntax highlighting.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["prism","highlight"],"license_spdx":"MIT","license_state":"standard","stars":13039,"forks":1389,"watchers":120,"monthly_downloads":110472083,"latest_score":83,"latest_band":"excellent","latest_scanned_at":"2026-09-17T15:34:01.574801Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/PrismJS/prism?v=14583995-1","icon_source_type":"homepage","badge_url":""},{"id":39586,"full_name":"moment/moment-timezone","url":"https://github.com/moment/moment-timezone","description":"Timezone support for moment.js","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["moment","date","time","timezone","olson","iana","zone","tz"],"license_spdx":"MIT","license_state":"standard","stars":3878,"forks":839,"watchers":92,"monthly_downloads":68871480,"latest_score":83,"latest_band":"excellent","latest_scanned_at":"2026-09-16T12:35:22.842977Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/moment/moment-timezone?v=10937095-1","icon_source_type":"homepage","badge_url":""},{"id":15887,"full_name":"swagger-api/swagger-ui","url":"https://github.com/swagger-api/swagger-ui","description":"Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["swagger","swagger-ui","swagger-api","rest","rest-api","openapi-specification","oas","openapi","openapi3","hacktoberfest","openapi31","open-source","swagger-oss","openapi32","swagger-client","documentation","ui","api","specification"],"license_spdx":"Apache-2.0","license_state":"standard","stars":29013,"forks":9254,"watchers":623,"monthly_downloads":49829467,"latest_score":99,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T18:07:06.317919Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/swagger-api/swagger-ui?v=97413946-1","icon_source_type":"homepage","badge_url":""},{"id":79,"full_name":"chartjs/Chart.js","url":"https://github.com/chartjs/Chart.js","description":"Simple HTML5 Charts using the <canvas> tag","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript","TypeScript"],"topics":["javascript","chart","html5","canvas","graph","html5-charts","charts","data","graphs","responsive"],"license_spdx":"MIT","license_state":"standard","stars":67695,"forks":11934,"watchers":1346,"monthly_downloads":48110339,"latest_score":90,"latest_band":"excellent","latest_scanned_at":"2026-09-16T14:42:52.928660Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/chartjs/Chart.js?v=39181fe2-1","icon_source_type":"homepage","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":7048,"median":53,"p25":42,"p75":63},{"label":"100 – 999","repositories":1660,"median":65,"p25":53,"p75":78},{"label":"1,000 – 9,999","repositories":703,"median":77,"p25":59,"p75":88},{"label":"10,000 and more","repositories":79,"median":90,"p25":83,"p75":94}],"popularity_downloads":[{"label":"Under 10K / month","repositories":3998,"median":53,"p25":42,"p75":63},{"label":"10K – 1M","repositories":4553,"median":57,"p25":47,"p75":71},{"label":"1M – 100M","repositories":721,"median":71,"p25":51,"p75":86},{"label":"100M and more","repositories":3,"median":86,"p25":83,"p75":88}],"freshness":[{"label":"Pushed within 30 days","repositories":6163},{"label":"31 – 90 days","repositories":2212},{"label":"91 – 365 days","repositories":778},{"label":"Over a year","repositories":337}],"median_days_since_push":11,"dependencies":{"basis":7888,"median_direct":2,"median_indirect":7,"median_total":11,"buckets":[{"label":"0","repositories":153},{"label":"1 – 5","repositories":1747},{"label":"6 – 20","repositories":3614},{"label":"21 – 50","repositories":885},{"label":"51 – 200","repositories":890},{"label":"201 – 500","repositories":235},{"label":"501 – 1,000","repositories":185},{"label":"Over 1,000","repositories":179}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":9406,"inconclusive_share":0.0023},{"name":"Fuzzing","mean":0.0,"measured":9419,"inconclusive_share":0.001},{"name":"SAST","mean":0.5,"measured":9404,"inconclusive_share":0.0025},{"name":"Signed-Releases","mean":0.9,"measured":455,"inconclusive_share":0.9517},{"name":"Pinned-Dependencies","mean":1.0,"measured":3024,"inconclusive_share":0.6793},{"name":"Branch-Protection","mean":1.3,"measured":7090,"inconclusive_share":0.248},{"name":"Token-Permissions","mean":1.5,"measured":2873,"inconclusive_share":0.6953},{"name":"Code-Review","mean":1.8,"measured":9366,"inconclusive_share":0.0066},{"name":"Security-Policy","mean":2.5,"measured":9428,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":3.0,"measured":9428,"inconclusive_share":0.0},{"name":"Maintained","mean":4.2,"measured":9428,"inconclusive_share":0.0},{"name":"CI-Tests","mean":5.3,"measured":6190,"inconclusive_share":0.3434},{"name":"Contributors","mean":7.4,"measured":9427,"inconclusive_share":0.0001},{"name":"License","mean":8.8,"measured":9428,"inconclusive_share":0.0},{"name":"Vulnerabilities","mean":9.2,"measured":9428,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.8,"measured":2873,"inconclusive_share":0.6953},{"name":"Binary-Artifacts","mean":10.0,"measured":9428,"inconclusive_share":0.0},{"name":"Packaging","mean":10.0,"measured":149,"inconclusive_share":0.9842}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":567,"repositories":9490,"share":0.0597,"share_of_record":0.0597},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":292,"repositories":9183,"share":0.0318,"share_of_record":0.0308},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":9,"repositories":2467,"share":0.0036,"share_of_record":0.0009},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":0,"repositories":160,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[5,203,361,705,1128,1887,1972,1573,1087,569]},{"key":"community","name":"Community & Adoption","bins":[18,159,888,1801,2696,1629,1171,656,375,97]},{"key":"governance","name":"Sustainability & Governance","bins":[0,2,23,485,913,2609,3162,1642,618,36]},{"key":"engineering","name":"Engineering Quality","bins":[111,172,485,788,1138,1578,1860,2095,1025,238]},{"key":"security","name":"Security","bins":[62,39,794,3167,2445,1591,1007,325,58,2]},{"key":"ai_readiness","name":"AI Readiness","bins":[165,674,1960,2738,2238,917,484,218,83,13]}],"downloads_top1pct_share":0.4082}