Shell Open-Source Supply-Chain Review
Shell repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: Shell. 152 successful scans; 152 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| Shell | 152 | 152 | 1.43 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| archlinuxcn/repo | 49.58 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 94,596 | 2026-10-31 |
| zsh-users/zsh-completions | 43.90 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 865 | 2026-10-31 |
| xiaoyaDev/xiaoya-alist | 18.01 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 15,105 | 2026-10-31 |
| pyenv/pyenv | 15.41 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 7,768 | 2026-10-31 |
| hykilpikonna/hyfetch | 12.08 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 12,426 | 2026-10-31 |
| google/oss-fuzz | 11.15 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 270,153 | 2026-10-31 |
| HariSekhon/DevOps-Bash-tools | 8.45 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 153,535 | 2026-10-31 |
| OthmanAdi/planning-with-files | 7.00 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 199,144 | 2026-10-31 |
| mack-a/v2ray-agent | 4.90 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 32,338 | 2026-10-31 |
| itzg/docker-minecraft-server | 3.71 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 13,237 | 2026-10-31 |
| kejilion/sh | 3.52 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 45,675 | 2026-10-31 |
| docker-library/official-images | 3.26 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 9,065 | 2026-10-31 |
| armbian/build | 2.52 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 68,660 | 2026-10-31 |
| ophub/amlogic-s9xxx-armbian | 2.47 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 19,956 | 2026-10-31 |
| leebaird/discover | 2.24 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 83,917 | 2026-10-31 |
| eip-work/kuboard-press | 1.89 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 253,945 | 2026-10-31 |
| HyDE-Project/HyDE | 1.77 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 65,901 | 2026-10-31 |
| acmesh-official/acme.sh | 1.70 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 73,046 | 2026-10-31 |
| zsh-users/zsh-syntax-highlighting | 1.55 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 17,637 | 2026-10-31 |
| tw93/Mole | 1.35 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 103,087 | 2026-10-31 |
| themactep/thingino-firmware | 1.31 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 340,738 | 2026-10-31 |
| Botspot/pi-apps | 1.27 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 3,924 | 2026-10-31 |
| unixorn/awesome-zsh-plugins | 1.25 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 3,960 | 2026-10-31 |
| ROCm/ROCm | 1.22 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 48,863 | 2026-10-31 |
| spaceship-prompt/spaceship-prompt | 1.12 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 20,032 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.