CSS Open-Source Supply-Chain Review
CSS repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: CSS. 14 successful scans; 14 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| CSS | 14 | 14 | 1.74 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| kenzok8/openwrt-packages | 10.46 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 104,789 | 2026-10-31 |
| knadh/oat | 8.83 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 6,494 | 2026-10-31 |
| OWASP/wstg | 1.95 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 35,599 | 2026-10-31 |
| ryanoasis/nerd-fonts | 1.17 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 80,755 | 2026-10-31 |
| jd-opensource/micro-app | 0.92 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 167,345 | 2026-10-31 |
| isocpp/CppCoreGuidelines | 0.63 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 31,861 | 2026-10-31 |
| nndl/nndl.github.io | 0.27 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 18,374 | 2026-10-31 |
| Nutlope/hallmark | 0.19 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 52,589 | 2026-10-31 |
| StylishThemes/GitHub-Dark | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 3,889 | 2026-10-31 |
| XiaomingX/ai-money-maker-handbook | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 32,029 | 2026-10-31 |
| architecture-decision-record/architecture-decision-record | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 2,298,232 | 2026-10-31 |
| prakhar1989/docker-curriculum | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 17,290 | 2026-10-31 |
| railsgirls/guides.railsgirls.com | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 11,864 | 2026-10-31 |
| vinceliuice/WhiteSur-gtk-theme | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 74,878 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.