QML Open-Source Supply-Chain Review
QML repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: QML. 6 successful scans; 6 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| QML | 6 | 6 | 5.16 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| end-4/dots-hyprland | 30.69 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 25,509 | 2026-10-31 |
| AvengeMedia/DankMaterialShell | 0.12 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 538,311 | 2026-10-31 |
| duxlabs-dev/dux-shell | 0.12 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 541,349 | 2026-10-31 |
| Swordfish90/cool-retro-term | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 4,323 | 2026-10-31 |
| caelestia-dots/shell | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 32,660 | 2026-10-31 |
| iDescriptor/iDescriptor | 0.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 225,370 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.