Supply-Chain Pattern Signals by Language

Python, TypeScript, Rust and other open-source language cohorts: dependency-review signals and coverage.

Report generated: 2026-11-14 17:29 UTC.

Unweighted mean of repository supply-chain heuristic indices, grouped by payload schema, engine and scoring version. Scans missing versions, scores or positive scan coverage are excluded; scanned totals show coverage. Zero does not verify dependencies.

LanguageScanned reposRepos scoredMean index / 100Schema / engine / scoring
Adblock Filter List550.251.0.0 / 2.0.0 / heuristic-density-v1
ANTLR111.841.0.0 / 2.0.0 / heuristic-density-v1
Assembly440.441.0.0 / 2.0.0 / heuristic-density-v1
Astro884.491.0.0 / 2.0.0 / heuristic-density-v1
Awk112.181.0.0 / 2.0.0 / heuristic-density-v1
Batchfile550.001.0.0 / 2.0.0 / heuristic-density-v1
Bicep221.701.0.0 / 2.0.0 / heuristic-density-v1
Bikeshed113.311.0.0 / 2.0.0 / heuristic-density-v1
Blade221.621.0.0 / 2.0.0 / heuristic-density-v1
Brainfuck110.001.0.0 / 2.0.0 / heuristic-density-v1
C2742741.221.0.0 / 2.0.0 / heuristic-density-v1
C#1981984.601.0.0 / 2.0.0 / heuristic-density-v1
C++4574571.771.0.0 / 2.0.0 / heuristic-density-v1
C3110.001.0.0 / 2.0.0 / heuristic-density-v1
Clojure881.401.0.0 / 2.0.0 / heuristic-density-v1
CMake110.321.0.0 / 2.0.0 / heuristic-density-v1
CodeQL116.621.0.0 / 2.0.0 / heuristic-density-v1
CoffeeScript110.001.0.0 / 2.0.0 / heuristic-density-v1
Common Lisp110.401.0.0 / 2.0.0 / heuristic-density-v1
Crystal333.151.0.0 / 2.0.0 / heuristic-density-v1
CSS14141.741.0.0 / 2.0.0 / heuristic-density-v1
Cuda559.791.0.0 / 2.0.0 / heuristic-density-v1
Cython339.991.0.0 / 2.0.0 / heuristic-density-v1
D334.131.0.0 / 2.0.0 / heuristic-density-v1
Dart43431.011.0.0 / 2.0.0 / heuristic-density-v1
DM110.811.0.0 / 2.0.0 / heuristic-density-v1
Dockerfile992.481.0.0 / 2.0.0 / heuristic-density-v1
EJS112.081.0.0 / 2.0.0 / heuristic-density-v1
Elixir10100.281.0.0 / 2.0.0 / heuristic-density-v1
Emacs Lisp10100.371.0.0 / 2.0.0 / heuristic-density-v1
Erlang555.181.0.0 / 2.0.0 / heuristic-density-v1
F#228.601.0.0 / 2.0.0 / heuristic-density-v1
F*116.871.0.0 / 2.0.0 / heuristic-density-v1
Fluent222.121.0.0 / 2.0.0 / heuristic-density-v1
GDScript660.001.0.0 / 2.0.0 / heuristic-density-v1
GLSL110.161.0.0 / 2.0.0 / heuristic-density-v1
Go6596591.401.0.0 / 2.0.0 / heuristic-density-v1
Go Template220.711.0.0 / 2.0.0 / heuristic-density-v1
Groovy5511.271.0.0 / 2.0.0 / heuristic-density-v1
Haml110.001.0.0 / 2.0.0 / heuristic-density-v1
Haskell12121.831.0.0 / 2.0.0 / heuristic-density-v1
Haxe110.001.0.0 / 2.0.0 / heuristic-density-v1
HCL222.091.0.0 / 2.0.0 / heuristic-density-v1
HLSL110.001.0.0 / 2.0.0 / heuristic-density-v1
HTML95954.581.0.0 / 2.0.0 / heuristic-density-v1
Inno Setup220.001.0.0 / 2.0.0 / heuristic-density-v1
Java3043049.381.0.0 / 2.0.0 / heuristic-density-v1
JavaScript5305303.561.0.0 / 2.0.0 / heuristic-density-v1
Jinja440.501.0.0 / 2.0.0 / heuristic-density-v1
JSON220.011.0.0 / 2.0.0 / heuristic-density-v1
Jsonnet110.001.0.0 / 2.0.0 / heuristic-density-v1
Julia110.081.0.0 / 2.0.0 / heuristic-density-v1
Jupyter Notebook878710.911.0.0 / 2.0.0 / heuristic-density-v1
Just221.261.0.0 / 2.0.0 / heuristic-density-v1
Kotlin1371375.961.0.0 / 2.0.0 / heuristic-density-v1
Lean330.421.0.0 / 2.0.0 / heuristic-density-v1
LLVM1199.801.0.0 / 2.0.0 / heuristic-density-v1
Logos220.001.0.0 / 2.0.0 / heuristic-density-v1
Lua34343.931.0.0 / 2.0.0 / heuristic-density-v1
Makefile990.131.0.0 / 2.0.0 / heuristic-density-v1
Markdown19190.671.0.0 / 2.0.0 / heuristic-density-v1
MATLAB110.001.0.0 / 2.0.0 / heuristic-density-v1
MDX18181.471.0.0 / 2.0.0 / heuristic-density-v1
Meson110.001.0.0 / 2.0.0 / heuristic-density-v1
MLIR118.371.0.0 / 2.0.0 / heuristic-density-v1
Mojo1111.771.0.0 / 2.0.0 / heuristic-density-v1
Mustache223.061.0.0 / 2.0.0 / heuristic-density-v1
Nim334.781.0.0 / 2.0.0 / heuristic-density-v1
Nix551.521.0.0 / 2.0.0 / heuristic-density-v1
Nunjucks110.001.0.0 / 2.0.0 / heuristic-density-v1
Objective-C14140.741.0.0 / 2.0.0 / heuristic-density-v1
Objective-C++220.001.0.0 / 2.0.0 / heuristic-density-v1
OCaml770.551.0.0 / 2.0.0 / heuristic-density-v1
Odin110.091.0.0 / 2.0.0 / heuristic-density-v1
Pascal440.211.0.0 / 2.0.0 / heuristic-density-v1
Perl660.581.0.0 / 2.0.0 / heuristic-density-v1
PHP1471471.601.0.0 / 2.0.0 / heuristic-density-v1
PLpgSQL220.611.0.0 / 2.0.0 / heuristic-density-v1
PLSQL116.801.0.0 / 2.0.0 / heuristic-density-v1
Pony110.001.0.0 / 2.0.0 / heuristic-density-v1
PostScript110.001.0.0 / 2.0.0 / heuristic-density-v1
PowerShell16161.571.0.0 / 2.0.0 / heuristic-density-v1
Python1259125913.311.0.0 / 2.0.0 / heuristic-density-v1
QML665.161.0.0 / 2.0.0 / heuristic-density-v1
R110.001.0.0 / 2.0.0 / heuristic-density-v1
Racket110.401.0.0 / 2.0.0 / heuristic-density-v1
Raku110.051.0.0 / 2.0.0 / heuristic-density-v1
Red110.001.0.0 / 2.0.0 / heuristic-density-v1
Ren'Py1147.351.0.0 / 2.0.0 / heuristic-density-v1
reStructuredText226.061.0.0 / 2.0.0 / heuristic-density-v1
Ruby81812.131.0.0 / 2.0.0 / heuristic-density-v1
Rust4834831.711.0.0 / 2.0.0 / heuristic-density-v1
Scala181810.061.0.0 / 2.0.0 / heuristic-density-v1
SCSS662.801.0.0 / 2.0.0 / heuristic-density-v1
Shell1521521.431.0.0 / 2.0.0 / heuristic-density-v1
Solidity555.071.0.0 / 2.0.0 / heuristic-density-v1
Starlark220.001.0.0 / 2.0.0 / heuristic-density-v1
Svelte116.981.0.0 / 2.0.0 / heuristic-density-v1
SVG110.001.0.0 / 2.0.0 / heuristic-density-v1
Swift1031031.421.0.0 / 2.0.0 / heuristic-density-v1
SWIG118.611.0.0 / 2.0.0 / heuristic-density-v1
SystemVerilog1144.621.0.0 / 2.0.0 / heuristic-density-v1
Tcl110.951.0.0 / 2.0.0 / heuristic-density-v1
TeX331.111.0.0 / 2.0.0 / heuristic-density-v1
Text110.001.0.0 / 2.0.0 / heuristic-density-v1
Tree-sitter Query111.071.0.0 / 2.0.0 / heuristic-density-v1
TypeScript121912192.361.0.0 / 2.0.0 / heuristic-density-v1
V110.871.0.0 / 2.0.0 / heuristic-density-v1
Vala110.001.0.0 / 2.0.0 / heuristic-density-v1
VBScript115.971.0.0 / 2.0.0 / heuristic-density-v1
Verilog112.441.0.0 / 2.0.0 / heuristic-density-v1
Vim Script770.331.0.0 / 2.0.0 / heuristic-density-v1
Vim Snippet220.001.0.0 / 2.0.0 / heuristic-density-v1
Visual Basic .NET330.001.0.0 / 2.0.0 / heuristic-density-v1
Vue31312.441.0.0 / 2.0.0 / heuristic-density-v1
WebAssembly220.071.0.0 / 2.0.0 / heuristic-density-v1
Wikitext111.121.0.0 / 2.0.0 / heuristic-density-v1
XML110.011.0.0 / 2.0.0 / heuristic-density-v1
YAML221.811.0.0 / 2.0.0 / heuristic-density-v1
YARA110.071.0.0 / 2.0.0 / heuristic-density-v1
Zig11110.821.0.0 / 2.0.0 / heuristic-density-v1

Language-specific reports

Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.

Read definitions and methodology