{
  "note": "Aggregate only. Dependency counts from committed manifests/lockfiles; vulnerable-dependency matching against public advisories. Method re-based in Q3 2026 \u2014 do not splice with pre-Q3 supply-chain figures.",
  "servers_scanned": 1399,
  "latest_scan": "2026-09-05 20:45:16",
  "tier_counts": {
    "Elevated": 384,
    "High": 123,
    "Low": 892
  },
  "repos_with_vulnerable_deps": 507,
  "dependency_count_histogram": [
    {
      "bucket": "1-9",
      "repos": 623
    },
    {
      "bucket": "10-24",
      "repos": 509
    },
    {
      "bucket": "25-49",
      "repos": 168
    },
    {
      "bucket": "50-99",
      "repos": 89
    },
    {
      "bucket": "100+",
      "repos": 10
    }
  ]
}