.actrc.template

.editorconfig

.eslintrc

.github

PULL_REQUEST_TEMPLATE.md

copilot-instructions.md

dependabot.yml

release-drafter.yml

workflows

benchmark-change.yml

enforce-pr-labels.yml

pr-feature.yml

pr-release.yml

publish-beta-version.yml

publish.yml

repo-dispatch-test.yml

sonarqube.yml

stale-pr-check.yml

test-publish

README.md

publish-test.json

.nvmrc

CODEOWNERS

CONTRIBUTING.md

benchmarks

2017.json

2017

benchmarks-schema.yaml

2018.json

2018

2019.json

2019

2020.json

2020

2021.json

2021

2022.json

2022

2023.json

2023

benchmark-exclusion-reasons.json

benchmarks-exclusion-reasons-schema.yaml

cost-national-averages-schema.yaml

cost-national-averages.json

2024.json

2024

2025.json

2025

claims-related

Dockerfile

Makefile

Pipfile

Pipfile.lock

data

2017_Claims_IndivMeasures_SingleSourceVersion2_11082017_andrea_edit.csv

2018_Claims_SingleSource_Bayes_Feedback_05032018.csv

2019_Claims_SingleSource_v1.0.csv

2019_Claims_SingleSource_v2.0.csv

2020_Claims_SingleSource_v1.4.csv

2021_Claims_SingleSource_v1.3.csv

2022_Claims_SingleSource_v6.0_08-12-2022.csv

2023_Claims_SingleSource_v7.0_1.29.24.csv

2024_Claims_SingleSource_v8.csv

2021_Claims_SingleSource_v1.2.csv

2022_Claims_SingleSource_v6.0.csv

2023_Claims_SingleSource_v7.0.csv

qpp-single-source-2022-6.0.json

qpp-single-source-2018.json

qpp-single-source-2019.json

qpp-single-source-2020.json

qpp-single-source-2021.json

qpp-single-source-2022.json

qpp-single-source-2023.json

qpp-single-source-2024.json

docker-compose.yml

pytest.ini

scripts

__init__.py

clean_csv.py

data_load.py

data_load_helpers.py

single_source_conversion_helpers.py

Quality Payment Program Measures Data Repository. 

qpp-measures-data

Quality Payment Program Measures Data Repository

aaronmanne

alunpm

bijujoseph

boristotle

chetanmunegowda

clkawell

cms-cis-qpp

cmsds

djacksonsb

dlomax30

frederick.huang

john-manack

kimadhoc

kyleapfel

ni.chia

nicholascgates

pstancic

pwolfertadhoc

rodmunoz

sarah-adhocteam

scoringengine

sdbaradhoc

suchint.nagra

tgroshsb

timwtoysb

petemckinneysb

gokhale

davidberry_sb

sivasrinisb

sb_kmr

cruddyshad0w

trzash-6891

ddhecker

cmsopensource

joshua.ewing-sb

tarikuzz

kramersb

nominaman83

adilenghel

azizakmeer

molindoz

kim-cmsds

andrii_tatusko

msingh45

walberglez

mconway11

alextychynskyi

merrin_fazzari

andy-hom

lfmk

kfard

rtdiggs

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

This Chrome extension includes content scripts that execute JavaScript on specified websites.

What are Chrome extension content scripts?

Chrome: Content Script

This Chrome extension requests host permissions to access specific websites or domains.

What are Chrome extension host permissions?

Chrome: Host Permission

This Chrome extension requests permissions to access browser APIs, user data, or system features.

What are Chrome extension permissions?

Chrome: Permission

This Chrome extension requests wildcard host permissions that grant broad access to websites.

What are Chrome extension wildcard host permissions?

Chrome: Wildcard Host Permission

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

qpp-measures-data - npm Package File explorer