C++ Open-Source Supply-Chain Review
C++ repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: C++. 457 successful scans; 457 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| C++ | 457 | 457 | 1.77 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| scylladb/scylladb | 71.02 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 377,214 | 2026-10-31 |
| v8/v8 | 35.87 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,929,698 | 2026-10-31 |
| apache/arrow | 32.24 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 652,036 | 2026-10-31 |
| tensorflow/serving | 30.81 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 30,780 | 2026-10-31 |
| protocolbuffers/protobuf | 26.35 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 709,291 | 2026-10-31 |
| grpc/grpc | 23.95 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 820,204 | 2026-10-31 |
| PowerDNS/pdns | 20.51 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 225,288 | 2026-10-31 |
| ninja-build/ninja | 13.97 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 12,628 | 2026-10-31 |
| zen-browser/desktop | 13.66 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 238,019 | 2026-10-31 |
| Fincept-Corporation/FinceptTerminal | 12.74 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 902,801 | 2026-10-31 |
| google/flatbuffers | 10.31 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 323,416 | 2026-10-31 |
| NVIDIA/cudf | 10.30 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 927,509 | 2026-10-31 |
| rapidsai/cudf | 10.30 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 927,509 | 2026-10-31 |
| PaddlePaddle/Paddle | 9.49 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 2,371,428 | 2026-10-31 |
| kungfu-systems/kungfu | 9.49 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 835,631 | 2026-10-31 |
| deepseek-ai/FlashMLA | 9.30 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 21,503 | 2026-10-31 |
| Alex313031/thorium | 9.01 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 37,340 | 2026-10-31 |
| LibreOffice/core | 8.99 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 1,722,668 | 2026-10-31 |
| petercorke/robotics-toolbox-python | 8.72 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 239,464 | 2026-10-31 |
| rr-debugger/rr | 8.61 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 124,603 | 2026-10-31 |
| microsoft/BitNet | 8.52 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 21,907 | 2026-10-31 |
| pybind/pybind11 | 8.51 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 80,570 | 2026-10-31 |
| HIllya51/LunaTranslator | 7.74 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 278,818 | 2026-10-31 |
| google/benchmark | 7.04 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 13,702 | 2026-10-31 |
| mongodb/mongo | 6.37 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 10,562,915 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.