Lua Open-Source Supply-Chain Review
Lua repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: Lua. 34 successful scans; 34 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| Lua | 34 | 34 | 3.93 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| nvim-tree/nvim-tree.lua | 83.75 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 21,739 | 2026-10-31 |
| NeogitOrg/neogit | 21.57 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 40,121 | 2026-10-31 |
| apache/apisix | 14.58 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 316,398 | 2026-10-31 |
| yetone/avante.nvim | 5.04 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 61,852 | 2026-10-31 |
| avante-corp/avante.nvim | 5.02 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 62,149 | 2026-10-31 |
| Kong/kong | 1.61 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 356,266 | 2026-10-31 |
| koreader/koreader | 0.36 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 238,253 | 2026-10-31 |
| mrcjkb/rustaceanvim | 0.36 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 13,881 | 2026-10-31 |
| bryanthaboi/gen1recomp | 0.27 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 3,469,827 | 2026-10-31 |
| neovim/nvim-lspconfig | 0.26 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 96,464 | 2026-10-31 |
| ibhagwan/fzf-lua | 0.21 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 48,432 | 2026-10-31 |
| Openwrt-Passwall/openwrt-passwall2 | 0.20 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 25,549 | 2026-10-31 |
| Openwrt-Passwall/openwrt-passwall | 0.16 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 31,825 | 2026-10-31 |
| ntop/ntopng | 0.16 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 745,654 | 2026-10-31 |
| PathOfBuildingCommunity/PathOfBuilding | 0.08 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 816,731 | 2026-10-31 |
| nvim-mini/mini.nvim | 0.07 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 210,979 | 2026-10-31 |
| AstroNvim/AstroNvim | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 5,961 | 2026-10-31 |
| CorsixTH/CorsixTH | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 197,168 | 2026-10-31 |
| LazyVim/LazyVim | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 22,930 | 2026-10-31 |
| Mintimate/oh-my-rime | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 233,861 | 2026-10-31 |
| NvChad/NvChad | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 778 | 2026-10-31 |
| ThePrimeagen/refactoring.nvim | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 9,962 | 2026-10-31 |
| amzxyz/rime-wanxiang | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 305,046 | 2026-10-31 |
| catppuccin/nvim | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 10,137 | 2026-10-31 |
| folke/lazy.nvim | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 18,891 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.