# WhiteSource — developer ecosystem report

- GitHub org: `whitesource`
- Category: dev_tool
- Overall score: 37.0 / 100
- Overall rank: #556
- Last refreshed: 2026-08-22

## Pillar scores

| Pillar | Score / 100 | Rank | Weight in overall |
| --- | --- | --- | --- |
| Code & Polish | 36.0 | #844 | ~22% |
| Education | 69.0 | #375 | ~18% |
| AI readiness | 42.0 | #294 | part of Reach |
| Builder experience | 0.0 | #1 | ~12% |
| Community | 18.0 | #714 | ~16% |
| Reach | 47.0 | #361 | ~18% |
| Momentum | 5.0 | #864 | ~14% |

## Links

- GitHub: https://github.com/whitesource
- Website: https://www.mend.io
- Docs: https://docs.mend.io

## Public GitHub totals

| Metric | Value |
| --- | --- |
| Repos analyzed | 12 |
| Stars | 442 |
| Forks | 201 |
| Open issues | 102 |
| Contributors | — |

## Top repositories

| Repo | Stars | Language | Description |
| --- | --- | --- | --- |
| [log4j-detect-distribution](https://github.com/whitesource/log4j-detect-distribution) | 131 | Go | — |
| [GitHubPackagesSecurityAction](https://github.com/whitesource/GitHubPackagesSecurityAction) | 69 | JavaScript | Mend security scan action for Github package registry  |
| [merge-confidence](https://github.com/whitesource/merge-confidence) | 67 | — | The home of Mend's Merge Confidence feature, for Renovate and Mend Remediate |
| [agents](https://github.com/whitesource/agents) | 52 | Java | White Source external update agents |
| [unified-agent-distribution](https://github.com/whitesource/unified-agent-distribution) | 47 | Dockerfile | — |
| [spring4shell-detect](https://github.com/whitesource/spring4shell-detect) | 19 | Go | — |
| [log4j-remediations](https://github.com/whitesource/log4j-remediations) | 9 | — | A Renovate preset for remediating transitive vulnerabilities of log4j |
| [CureKit](https://github.com/whitesource/CureKit) | 8 | Java | A repository containing code security remediation solutions used by WhiteSource Cure |
| [fs-agent](https://github.com/whitesource/fs-agent) | 7 | Java | File system agent for integration with WhiteSource service |
| [maven-dependency-tree-parser](https://github.com/whitesource/maven-dependency-tree-parser) | 5 | JavaScript | This library contains a set of parsers that parse the output of the maven command "mvn dependency:tree", and a set of ut |
| [teamcity-plugin](https://github.com/whitesource/teamcity-plugin) | 4 | Java | White Source plugin for JetBrains TeamCity |
| [whitesource_orb](https://github.com/whitesource/whitesource_orb) | 4 | — | — |

## Methodology

Scores are computed from public signals only (GitHub, package registries, docs sites, community platforms). Pillar definitions: https://www.smoower.com/docs.md

---

HTML version: https://www.smoower.com/whitesource
Machine index: https://www.smoower.com/llms.txt · MCP server: https://www.smoower.com/mcp · REST API: https://www.smoower.com/api/v1