{"ecosystem":"rubygems","ecosystem_label":"RubyGems","indexed_repositories":3736,"inspected_repositories":3736,"monthly_downloads":1526302655,"median_score":62,"share_good_or_better":0.4732,"computed_at":"2026-10-11T14:43:07.136929Z","bands":[{"band":"exceptional","repositories":204,"monthly_downloads":605607812},{"band":"excellent","repositories":731,"monthly_downloads":565030089},{"band":"good","repositories":833,"monthly_downloads":51765948},{"band":"moderate","repositories":844,"monthly_downloads":21447256},{"band":"weak","repositories":468,"monthly_downloads":372170},{"band":"at_risk","repositories":484,"monthly_downloads":243755779},{"band":"critical","repositories":172,"monthly_downloads":38323601}],"histogram":[{"start":0,"count":1},{"start":5,"count":11},{"start":10,"count":51},{"start":15,"count":109},{"start":20,"count":118},{"start":25,"count":185},{"start":30,"count":181},{"start":35,"count":122},{"start":40,"count":152},{"start":45,"count":194},{"start":50,"count":268},{"start":55,"count":292},{"start":60,"count":284},{"start":65,"count":298},{"start":70,"count":215},{"start":75,"count":320},{"start":80,"count":380},{"start":85,"count":234},{"start":90,"count":210},{"start":95,"count":111}],"categories":[{"key":"vitality","name":"Vitality","median":62,"record_median":68,"repositories":3736},{"key":"community","name":"Community & Adoption","median":56,"record_median":45,"repositories":3736},{"key":"governance","name":"Sustainability & Governance","median":64,"record_median":58,"repositories":3736},{"key":"engineering","name":"Engineering Quality","median":66,"record_median":66,"repositories":3736},{"key":"security","name":"Security","median":50,"record_median":49,"repositories":3736},{"key":"ai_readiness","name":"AI Readiness","median":43,"record_median":56,"repositories":3736}],"practices":[{"key":"readme","label":"README","share":0.9529,"repositories":3736},{"key":"license","label":"License detected","share":0.94,"repositories":3736},{"key":"ci","label":"CI workflows","share":0.8129,"repositories":3736},{"key":"tests","label":"Automated tests","share":0.9446,"repositories":3736},{"key":"linter","label":"Linter configuration","share":0.5779,"repositories":3736},{"key":"docs_dir","label":"Documentation directory","share":0.3025,"repositories":3736},{"key":"contributing","label":"Contributing guide","share":0.352,"repositories":3736},{"key":"security_policy","label":"Security policy","share":0.1435,"repositories":3736},{"key":"code_of_conduct","label":"Code of conduct","share":0.2942,"repositories":3736},{"key":"agent_instructions","label":"AI agent instructions","share":0.1785,"repositories":3736},{"key":"bootstrap","label":"One-command bootstrap","share":0.1408,"repositories":3736},{"key":"llms_txt","label":"llms.txt","share":0.1333,"repositories":3736}],"stewardship":[{"key":"organization","label":"Organization-stewarded","repositories":2389,"median_score":69},{"key":"user","label":"Personal accounts","repositories":1347,"median_score":54}],"bus_factor":[{"bucket":"1","repositories":2538},{"bucket":"2","repositories":754},{"bucket":"3–5","repositories":383},{"bucket":"6+","repositories":57}],"single_maintainer_share":0.6801,"single_maintainer_high_reliance":30,"licenses":[{"license":"MIT","state":"standard","repositories":2237},{"license":null,"state":"custom","repositories":513},{"license":"Apache-2.0","state":"standard","repositories":425},{"license":null,"state":"absent","repositories":224},{"license":"BSD-2-Clause","state":"standard","repositories":79},{"license":"GPL-3.0","state":"standard","repositories":54},{"license":"BSD-3-Clause","state":"standard","repositories":51},{"license":"GPL-2.0","state":"standard","repositories":38},{"license":"AGPL-3.0","state":"standard","repositories":34},{"license":"MPL-2.0","state":"standard","repositories":16}],"ecosystems":[],"top_repositories":[{"id":372,"full_name":"react/react-native","url":"https://github.com/react/react-native","description":"A framework for building native applications using React","ecosystem":"npm","ecosystems":["npm","maven","rubygems"],"primary_language":"C++","languages":["C++","Kotlin","JavaScript"],"topics":["android","app-framework","ios","mobile","mobile-development","react-native","cross-platform","react","polyfill","polyfills","js","js-polyfills","jest","preset","metro","config","gradle","plugin","tools"],"license_spdx":"MIT","license_state":"standard","stars":126626,"forks":25248,"watchers":3527,"monthly_downloads":207387658,"latest_score":94,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T13:31:43.373594Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/react/react-native?v=74e41fe8-1","icon_source_type":"homepage","badge_url":""},{"id":57775,"full_name":"petkaantonov/bluebird","url":"https://github.com/petkaantonov/bluebird","description":":bird: :zap: Bluebird is a full featured promise library with unmatched performance.","ecosystem":"npm","ecosystems":["npm","rubygems"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["promise","performance","promises","promises-a","promises-aplus","async","await","deferred","deferreds","future","flow-control","dsl","fluent-interface"],"license_spdx":"MIT","license_state":"standard","stars":20486,"forks":2308,"watchers":330,"monthly_downloads":202514522,"latest_score":32,"latest_band":"at_risk","latest_scanned_at":"2026-09-17T14:52:18.453374Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"likely_abandoned","red_flags":["abandonment"],"icon_url":"/icon/v1/petkaantonov/bluebird?v=d7f6cca9-1","icon_source_type":"readme","badge_url":""},{"id":58014,"full_name":"dsherret/ts-morph","url":"https://github.com/dsherret/ts-morph","description":"TypeScript Compiler API wrapper for static analysis and programmatic code changes.","ecosystem":"npm","ecosystems":["npm","rubygems"],"primary_language":"TypeScript","languages":["TypeScript"],"topics":["typescript","ast","code-generation","javascript","static-analysis","code-refactor","compiler","bootstrap"],"license_spdx":"MIT","license_state":"standard","stars":6181,"forks":238,"watchers":19,"monthly_downloads":193511988,"latest_score":80,"latest_band":"excellent","latest_scanned_at":"2026-09-17T17:14:51.137872Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/dsherret/ts-morph?v=e99428e4-1","icon_source_type":"avatar","badge_url":""},{"id":36259,"full_name":"handlebars-lang/handlebars.js","url":"https://github.com/handlebars-lang/handlebars.js","description":"Minimal templating on steroids.","ecosystem":"npm","ecosystems":["npm","rubygems","packagist"],"primary_language":"JavaScript","languages":["JavaScript"],"topics":["handlebars","mustache","templates","template","html"],"license_spdx":"MIT","license_state":"standard","stars":18673,"forks":2067,"watchers":438,"monthly_downloads":150441884,"latest_score":86,"latest_band":"excellent","latest_scanned_at":"2026-09-16T11:26:18.991664Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/handlebars-lang/handlebars.js?v=1a4cd4f8-1","icon_source_type":"avatar","badge_url":""},{"id":44133,"full_name":"GREsau/schemars","url":"https://github.com/GREsau/schemars","description":"Generate JSON Schema documents from Rust code","ecosystem":"crates","ecosystems":["crates","rubygems"],"primary_language":"Rust","languages":["Rust"],"topics":["json-schema","rust","serde","encoding","no-std"],"license_spdx":"MIT","license_state":"standard","stars":1411,"forks":304,"watchers":10,"monthly_downloads":77268817,"latest_score":80,"latest_band":"excellent","latest_scanned_at":"2026-09-16T12:56:41.747978Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/GREsau/schemars?v=63802d31-1","icon_source_type":"avatar","badge_url":""},{"id":49073,"full_name":"facebook/flow","url":"https://github.com/facebook/flow","description":"Adds static typing to JavaScript to improve developer productivity and code quality.","ecosystem":"npm","ecosystems":["npm","crates","rubygems"],"primary_language":"Rust","languages":["Rust","JavaScript"],"topics":["cli-app","cli","bin","binary","flow","facebook","type","inference","check","checker","javascript","js","wrapper","flowtype","compiler","transpiler","transform","es6"],"license_spdx":"MIT","license_state":"standard","stars":22289,"forks":1893,"watchers":381,"monthly_downloads":74862994,"latest_score":94,"latest_band":"exceptional","latest_scanned_at":"2026-09-16T12:37:57.965082Z","has_high_risk_jurisdiction_exposure":false,"has_malicious_dependency":false,"growth_authenticity":"unverified","abandonment_state":"maintained","red_flags":[],"icon_url":"/icon/v1/facebook/flow?v=bbb79831-1","icon_source_type":"avatar","badge_url":""}],"popularity_stars":[{"label":"Under 100 stars","repositories":2128,"median":59,"p25":44,"p75":75},{"label":"100 – 999","repositories":982,"median":63,"p25":43,"p75":81},{"label":"1,000 – 9,999","repositories":554,"median":75,"p25":54,"p75":89},{"label":"10,000 and more","repositories":72,"median":91,"p25":83,"p75":97}],"popularity_downloads":[{"label":"Under 10K / month","repositories":182,"median":65,"p25":56,"p75":78},{"label":"10K – 1M","repositories":177,"median":80,"p25":64,"p75":88},{"label":"1M – 100M","repositories":62,"median":90,"p25":77,"p75":94},{"label":"100M and more","repositories":4,"median":83,"p25":44,"p75":92}],"freshness":[{"label":"Pushed within 30 days","repositories":2165},{"label":"31 – 90 days","repositories":603},{"label":"91 – 365 days","repositories":340},{"label":"Over a year","repositories":628}],"median_days_since_push":13,"dependencies":{"basis":3392,"median_direct":2,"median_indirect":12,"median_total":16,"buckets":[{"label":"0","repositories":82},{"label":"1 – 5","repositories":494},{"label":"6 – 20","repositories":1313},{"label":"21 – 50","repositories":455},{"label":"51 – 200","repositories":566},{"label":"201 – 500","repositories":149},{"label":"501 – 1,000","repositories":106},{"label":"Over 1,000","repositories":227}]},"scorecard_checks":[{"name":"CII-Best-Practices","mean":0.0,"measured":3703,"inconclusive_share":0.0016},{"name":"Fuzzing","mean":0.1,"measured":3706,"inconclusive_share":0.0008},{"name":"Signed-Releases","mean":0.6,"measured":458,"inconclusive_share":0.8765},{"name":"Branch-Protection","mean":1.0,"measured":2610,"inconclusive_share":0.2963},{"name":"SAST","mean":1.4,"measured":3704,"inconclusive_share":0.0013},{"name":"Pinned-Dependencies","mean":1.7,"measured":3058,"inconclusive_share":0.1755},{"name":"Token-Permissions","mean":2.1,"measured":2994,"inconclusive_share":0.1928},{"name":"Security-Policy","mean":2.5,"measured":3709,"inconclusive_share":0.0},{"name":"Code-Review","mean":2.7,"measured":3682,"inconclusive_share":0.0073},{"name":"Dependency-Update-Tool","mean":4.4,"measured":3709,"inconclusive_share":0.0},{"name":"Maintained","mean":5.2,"measured":3709,"inconclusive_share":0.0},{"name":"CI-Tests","mean":5.5,"measured":3205,"inconclusive_share":0.1359},{"name":"Vulnerabilities","mean":7.7,"measured":3707,"inconclusive_share":0.0005},{"name":"Contributors","mean":7.8,"measured":3708,"inconclusive_share":0.0003},{"name":"License","mean":9.3,"measured":3709,"inconclusive_share":0.0},{"name":"Binary-Artifacts","mean":9.7,"measured":3709,"inconclusive_share":0.0},{"name":"Dangerous-Workflow","mean":9.9,"measured":2994,"inconclusive_share":0.1928},{"name":"Packaging","mean":10.0,"measured":526,"inconclusive_share":0.8582}],"red_flags":[{"key":"abandonment","label":"Abandonment","wiki_slug":"abandonment","findings":611,"repositories":3736,"share":0.1635,"share_of_record":0.1635},{"key":"high_risk_jurisdiction_exposure","label":"High-Risk Jurisdiction Exposure","wiki_slug":"jurisdiction-exposure","findings":46,"repositories":3585,"share":0.0128,"share_of_record":0.0123},{"key":"inorganic_growth","label":"Inorganic growth","wiki_slug":"growth-authenticity","findings":15,"repositories":329,"share":0.0456,"share_of_record":0.004},{"key":"malicious_dependencies","label":"Malicious dependencies","wiki_slug":"malicious-dependencies","findings":9,"repositories":1709,"share":0.0053,"share_of_record":0.0024}],"category_histograms":[{"key":"vitality","name":"Vitality","bins":[40,503,305,247,266,361,545,589,451,429]},{"key":"community","name":"Community & Adoption","bins":[13,82,136,466,693,726,658,539,293,130]},{"key":"governance","name":"Sustainability & Governance","bins":[0,1,22,153,260,884,1256,755,367,38]},{"key":"engineering","name":"Engineering Quality","bins":[4,16,96,138,368,598,905,856,552,203]},{"key":"security","name":"Security","bins":[8,30,205,826,797,785,701,296,84,4]},{"key":"ai_readiness","name":"AI Readiness","bins":[12,71,597,930,773,514,427,227,131,54]}],"downloads_top1pct_share":0.9251}