Cuda Open-Source Supply-Chain Review
Cuda repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: Cuda. 5 successful scans; 5 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| Cuda | 5 | 5 | 9.79 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| deepseek-ai/DeepGEMM | 19.96 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 19,091 | 2026-10-31 |
| deepseek-ai/DeepEP | 11.99 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 11,355 | 2026-10-31 |
| flashinfer-ai/flashinfer | 9.78 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 4,292,733 | 2026-10-31 |
| xlite-dev/LeetCUDA | 5.03 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 57,190 | 2026-10-31 |
| MoonshotAI/FlashKDA | 2.17 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 2,281 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.