{"ecosystem":"packagist","ecosystem_label":"Packagist","indexed_repositories":7457,"inspected_repositories":7456,"monthly_downloads":5167562595,"median_score":57,"share_good_or_better":0.3336,"computed_at":"2026-09-08T04:01:25.319432Z","bands":[{"band":"exceptional","repositories":129,"monthly_downloads":488814533},{"band":"excellent","repositories":902,"monthly_downloads":1595294946},{"band":"good","repositories":1456,"monthly_downloads":1236056673},{"band":"moderate","repositories":2662,"monthly_downloads":836578424},{"band":"weak","repositories":1537,"monthly_downloads":578883994},{"band":"at_risk","repositories":656,"monthly_downloads":391047022},{"band":"critical","repositories":114,"monthly_downloads":40887003}],"histogram":[{"start":0,"count":0},{"start":5,"count":18},{"start":10,"count":34},{"start":15,"count":62},{"start":20,"count":56},{"start":25,"count":164},{"start":30,"count":436},{"start":35,"count":416},{"start":40,"count":405},{"start":45,"count":716},{"start":50,"count":1090},{"start":55,"count":830},{"start":60,"count":742},{"start":65,"count":635},{"start":70,"count":342},{"start":75,"count":479},{"start":80,"count":475},{"start":85,"count":300},{"start":90,"count":194},{"start":95,"count":62}],"categories":[{"key":"vitality","name":"Vitality","median":64,"record_median":71,"repositories":7457},{"key":"community","name":"Community & Adoption","median":47,"record_median":45,"repositories":7457},{"key":"governance","name":"Sustainability & Governance","median":64,"record_median":59,"repositories":7457},{"key":"engineering","name":"Engineering Quality","median":62,"record_median":65,"repositories":7457},{"key":"security","name":"Security","median":42,"record_median":47,"repositories":7457},{"key":"ai_readiness","name":"AI Readiness","median":34,"record_median":53,"repositories":7457}],"practices":[{"key":"readme","label":"README","share":0.9575,"repositories":7456},{"key":"license","label":"License detected","share":0.908,"repositories":7456},{"key":"ci","label":"CI workflows","share":0.7833,"repositories":7456},{"key":"tests","label":"Automated tests","share":0.8121,"repositories":7456},{"key":"linter","label":"Linter configuration","share":0.4839,"repositories":7456},{"key":"docs_dir","label":"Documentation directory","share":0.2331,"repositories":7456},{"key":"contributing","label":"Contributing guide","share":0.4966,"repositories":7456},{"key":"security_policy","label":"Security policy","share":0.1719,"repositories":7456},{"key":"code_of_conduct","label":"Code of conduct","share":0.2221,"repositories":7456},{"key":"agent_instructions","label":"AI agent instructions","share":0.0885,"repositories":7456},{"key":"bootstrap","label":"One-command bootstrap","share":0.1046,"repositories":7456},{"key":"llms_txt","label":"llms.txt","share":0.0984,"repositories":7456}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":5920,"median_score":57},{"key":"user","label":"Personal accounts","repositories":1536,"median_score":57}],"bus_factor":[{"bucket":"1","repositories":4554},{"bucket":"2","repositories":1809},{"bucket":"3–5","repositories":949},{"bucket":"6+","repositories":121}],"single_maintainer_share":0.6127,"single_maintainer_high_reliance":395,"licenses":[{"license":"MIT","state":"standard","repositories":3744},{"license":null,"state":"custom","repositories":1458},{"license":null,"state":"absent","repositories":686},{"license":"BSD-3-Clause","state":"standard","repositories":462},{"license":"GPL-2.0","state":"standard","repositories":296},{"license":"Apache-2.0","state":"standard","repositories":294},{"license":"GPL-3.0","state":"standard","repositories":175},{"license":"AFL-3.0","state":"standard","repositories":65},{"license":"LGPL-3.0","state":"standard","repositories":62},{"license":"OSL-3.0","state":"standard","repositories":55}],"ecosystems":[],"top_repositories":[{"id":36259,"full_name":"handlebars-lang/handlebars.js","url":"https://github.com/handlebars-lang/handlebars.js","description":"Minimal templating on steroids.","ecosystem":"npm","ecosystems":["npm","rubygems","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["handlebars","mustache","templates","template","html"],"license_spdx":"MIT","license_state":"standard","stars":18664,"forks":2068,"watchers":434,"monthly_downloads":168313339,"latest_score":87,"latest_band":"excellent","latest_scanned_at":"2026-08-04T20:21:27.673745Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/handlebars-lang/handlebars.js?v=1a4cd4f8-1","icon_source_type":"avatar","badge_url":""},{"id":260,"full_name":"moment/moment","url":"https://github.com/moment/moment","description":"Parse, validate, manipulate, and display dates in javascript.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["moment","date","time","parse","format","validate","i18n","l10n","ender"],"license_spdx":"MIT","license_state":"standard","stars":47925,"forks":6988,"watchers":823,"monthly_downloads":139719460,"latest_score":77,"latest_band":"good","latest_scanned_at":"2026-08-04T20:35:09.211472Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/moment/moment?v=7ad18a2b-1","icon_source_type":"homepage","badge_url":""},{"id":57840,"full_name":"PrismJS/prism","url":"https://github.com/PrismJS/prism","description":"Lightweight, robust, elegant syntax highlighting.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["prism","highlight"],"license_spdx":"MIT","license_state":"standard","stars":13036,"forks":1385,"watchers":118,"monthly_downloads":109402598,"latest_score":80,"latest_band":"excellent","latest_scanned_at":"2026-08-12T20:59:26.294206Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/PrismJS/prism?v=14583995-1","icon_source_type":"homepage","badge_url":""},{"id":39586,"full_name":"moment/moment-timezone","url":"https://github.com/moment/moment-timezone","description":"Timezone support for moment.js","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["moment","date","time","timezone","olson","iana","zone","tz"],"license_spdx":"MIT","license_state":"standard","stars":3876,"forks":839,"watchers":92,"monthly_downloads":71836383,"latest_score":78,"latest_band":"good","latest_scanned_at":"2026-08-04T21:20:44.664987Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/moment/moment-timezone?v=10937095-1","icon_source_type":"homepage","badge_url":""},{"id":79,"full_name":"chartjs/Chart.js","url":"https://github.com/chartjs/Chart.js","description":"Simple HTML5 Charts using the <canvas> tag","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript","TypeScript"],"topics":["javascript","chart","html5","canvas","graph","html5-charts","charts","data","graphs","responsive"],"license_spdx":"MIT","license_state":"standard","stars":67625,"forks":11946,"watchers":1343,"monthly_downloads":53377892,"latest_score":84,"latest_band":"excellent","latest_scanned_at":"2026-08-04T23:12:01.233955Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/chartjs/Chart.js?v=39181fe2-1","icon_source_type":"homepage","badge_url":""},{"id":15887,"full_name":"swagger-api/swagger-ui","url":"https://github.com/swagger-api/swagger-ui","description":"Swagger UI is a collection of HTML, JavaScript, and CSS assets that dynamically generate beautiful documentation from a Swagger-compliant API.","ecosystem":"npm","ecosystems":["npm","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["swagger","swagger-ui","swagger-api","swagger-js","rest","rest-api","openapi-specification","oas","openapi","openapi3","hacktoberfest","openapi31","open-source","swagger-oss","documentation","ui","api","specification"],"license_spdx":"Apache-2.0","license_state":"standard","stars":28954,"forks":9266,"watchers":619,"monthly_downloads":50285765,"latest_score":98,"latest_band":"exceptional","latest_scanned_at":"2026-08-05T02:13:22.933507Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"organic","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/swagger-api/swagger-ui?v=97413946-1","icon_source_type":"homepage","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":5395,"median":54,"p25":45,"p75":63},{"label":"100 – 999","repositories":1359,"median":67,"p25":54,"p75":78},{"label":"1,000 – 9,999","repositories":629,"median":77,"p25":60,"p75":88},{"label":"10,000 and more","repositories":73,"median":88,"p25":78,"p75":94}],"popularity_downloads":[{"label":"Under 10K / month","repositories":2980,"median":54,"p25":44,"p75":63},{"label":"10K – 1M","repositories":3650,"median":59,"p25":48,"p75":71},{"label":"1M – 100M","repositories":649,"median":71,"p25":51,"p75":84},{"label":"100M and more","repositories":3,"median":80,"p25":77,"p75":87}],"freshness":[{"label":"Pushed within 30 days","repositories":5976},{"label":"31 – 90 days","repositories":533},{"label":"91 – 365 days","repositories":704},{"label":"Over a year","repositories":243}],"median_days_since_push":0,"dependencies":{"basis":6442,"median_direct":2,"median_indirect":7,"median_total":11,"buckets":[{"label":"0","repositories":106},{"label":"1 – 5","repositories":1397},{"label":"6 – 20","repositories":2947},{"label":"21 – 50","repositories":770},{"label":"51 – 200","repositories":731},{"label":"201 – 500","repositories":195},{"label":"501 – 1,000","repositories":146},{"label":"Over 1,000","repositories":150}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":7421,"inconclusive_share":0.0017},{"name":"Fuzzing","mean":0.0,"measured":7429,"inconclusive_share":0.0007},{"name":"SAST","mean":0.5,"measured":7431,"inconclusive_share":0.0004},{"name":"Pinned-Dependencies","mean":0.9,"measured":2300,"inconclusive_share":0.6906},{"name":"Signed-Releases","mean":1.0,"measured":371,"inconclusive_share":0.9501},{"name":"Branch-Protection","mean":1.4,"measured":5428,"inconclusive_share":0.2698},{"name":"Token-Permissions","mean":1.4,"measured":2198,"inconclusive_share":0.7043},{"name":"Code-Review","mean":1.9,"measured":7395,"inconclusive_share":0.0052},{"name":"Security-Policy","mean":2.4,"measured":7434,"inconclusive_share":0.0},{"name":"Dependency-Update-Tool","mean":3.3,"measured":7434,"inconclusive_share":0.0},{"name":"Maintained","mean":4.0,"measured":7434,"inconclusive_share":0.0},{"name":"CI-Tests","mean":5.2,"measured":4893,"inconclusive_share":0.3418},{"name":"Contributors","mean":7.6,"measured":7433,"inconclusive_share":0.0001},{"name":"License","mean":8.9,"measured":7433,"inconclusive_share":0.0001},{"name":"Vulnerabilities","mean":9.2,"measured":7434,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.8,"measured":2198,"inconclusive_share":0.7043},{"name":"Binary-Artifacts","mean":10.0,"measured":7434,"inconclusive_share":0.0},{"name":"Packaging","mean":10.0,"measured":112,"inconclusive_share":0.9849}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":362,"repositories":7457,"share":0.0485,"share_of_record":0.0486},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":249,"repositories":7237,"share":0.0344,"share_of_record":0.0334},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":4,"repositories":1597,"share":0.0025,"share_of_record":0.0005},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":0,"repositories":166,"share":0.0,"share_of_record":0.0}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[7,144,309,424,702,1396,1687,1363,925,500]},{"key":"community","name":"Community & Adoption","bins":[9,49,528,1386,2199,1313,943,582,353,95]},{"key":"governance","name":"Sustainability & Governance","bins":[0,1,8,270,553,1766,2668,1466,673,52]},{"key":"engineering","name":"Engineering Quality","bins":[31,136,370,634,917,1259,1487,1690,763,170]},{"key":"security","name":"Security","bins":[29,35,595,2525,1949,1314,710,265,33,2]},{"key":"ai_readiness","name":"AI Readiness","bins":[162,600,1730,2470,1357,672,267,142,48,9]}],"downloads_top1pct_share":0.3721}