C Open-Source Supply-Chain Review
C repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: C. 274 successful scans; 274 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| C | 274 | 274 | 1.22 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| ravynsoft/ravynos | 96.87 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 24,310,337 | 2026-10-31 |
| taosdata/TDengine | 16.63 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 2,862,738 | 2026-10-31 |
| iovisor/bcc | 15.19 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 169,602 | 2026-10-31 |
| RsyncProject/rsync | 12.33 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 146,798 | 2026-10-31 |
| SynoCommunity/spksrc | 8.69 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 109,460 | 2026-10-31 |
| valentderah/totk-pc-recomp | 7.59 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 177,710 | 2026-11-14 |
| crosspoint-reader/crosspoint-reader | 6.79 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 318,002 | 2026-10-31 |
| orioledb/orioledb | 6.74 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 224,644 | 2026-10-31 |
| DarkFlippers/unleashed-firmware | 6.15 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 509,863 | 2026-10-31 |
| flipperdevices/flipperzero-firmware | 5.34 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 425,375 | 2026-10-31 |
| floooh/sokol | 4.88 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 111,481 | 2026-10-31 |
| lz4/lz4 | 4.44 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 45,401 | 2026-10-31 |
| FareedKhan-dev/kimi-k3-in-c | 4.35 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 31,497 | 2026-10-31 |
| veracrypt/VeraCrypt | 4.33 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 406,415 | 2026-10-31 |
| FRRouting/frr | 4.29 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,623,531 | 2026-10-31 |
| jart/cosmopolitan | 4.24 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 3,342,128 | 2026-10-31 |
| pgbackrest/pgbackrest | 4.09 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 232,016 | 2026-10-31 |
| nicbarker/clay | 4.07 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 30,653 | 2026-10-31 |
| jarun/nnn | 3.86 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 19,049 | 2026-10-31 |
| effekseer/Effekseer | 3.70 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 498,685 | 2026-10-31 |
| Genymobile/scrcpy | 3.62 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 54,298 | 2026-10-31 |
| semgrep/semgrep | 3.43 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 821,228 | 2026-10-31 |
| nmap/nmap | 3.42 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 662,711 | 2026-10-31 |
| SchedMD/slurm | 3.38 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,203,079 | 2026-10-31 |
| micropython/micropython | 3.33 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 665,269 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.