Project activity
What the project publishes, what the disclosure index has read, and how the material is being used.
Published
What exists in this release, counted from the source definitions rather than asserted.
Disclosure index
Public advisories and filings read on a schedule and matched to control areas. See the full dashboard.
Use
Opening a pack, taking its query away, and downloading something to implement with are counted separately, by distinct browsers rather than by clicks.
Practitioner reports
Self-reported results from running a pack, and problems people found. A report that a pack did not run is as useful as one that it did.
How this is counted
What is recorded
Only structural metadata about an action: which pack, which platform, which release, how many parameters were customised expressed as a band, and an hour-precision timestamp. A random browser-scoped identifier separates repeat visits from new ones.
What is never recorded
Identifiers pasted into scope fields, generated query text, query results, parameter values, email addresses, IP addresses, or anything derived from them. Sensitive values are processed in the browser, never transmitted, and never placed in a URL.
Browsers, not people
A participant is a browser profile. One person using two browsers counts twice; two people sharing a machine may count once. Treat it as a floor, not a headcount.
Countries
A count of distinct countries only, derived at the network edge without reading or storing an IP address, and suppressed below three so the figure can never narrow toward one visitor.
What is deliberately not counted
Rendering a query is not an action. An earlier release recorded one every time a pack, platform, or evidence mode was switched, which made the largest figure here a measure of clicking around. A pack counts as exercised only once someone went past reading it.
Why writes are restricted
The collector accepts events only from this site's own origin and caps how many one browser can record in an hour. Without those checks anyone could post fabricated events and make these figures meaningless.
What these numbers mean
They are usage counts. They do not show that anything was deployed or that any control improved anywhere — only a practitioner report can speak to that, and those are self-reported.