---
title: "Scatter plot data for the Risk Matrix tab"
method: GET
path: "/ossprey/packages/scatter"
tags: ["Packages"]
---

# Scatter plot data for the Risk Matrix tab

`GET /ossprey/packages/scatter`

Returns all packages where `is_critical = true AND has_critical_vulnerability = true` as lightweight data points for the health-vs-impact scatter plot. No pagination — this filter set is expected to stay around 2 000 packages. Ordered by `impact DESC`.

Dot color is determined by `stewardshipStatus`. Legend checkboxes toggle visibility client-side — no additional API calls needed.

## Response `200`

Scatter plot data points.

- object
  - `points` ScatterPoint[], required
    - `purl` string, required
    - `name` string, required
    - `criticalityScore` integer, required — ROUND(p.impact × 100). Y-axis position (0–100).
    - `healthScore` integer, required — ROUND(scorecard_score × 10). X-axis position (0–100). 0 if no repo.
    - `healthBand` 'healthy' | 'fair' | 'concerning' | 'critical', required — Falls back to scorecard thresholds — never 'excellent' (scatter uses scorecard score only, not Tinybird health_label).
    - `stewardshipStatus` 'unassigned' | 'open' | 'assessing' | 'active' | 'needs_attention' | 'escalated' | 'blocked' | 'inactive'
    - `stewardshipId` string, nullable
    - `openVulns` integer, required
    - `advisoryCount` integer, required — Alias of openVulns — explicit field for tooltip display.
  - `total` integer, required — Count of packages matching the filter (is_critical = true AND has_critical_vulnerability = true). Equals points.length — no separate count query.

## Other responses

- `401` — Missing or invalid bearer token.

---

[API](https://skmtc.dev/linuxfoundation/apis/cdp-public-api-ossprey-admin-dashboard-v2.md) · [All operations](https://skmtc.dev/linuxfoundation/apis/cdp-public-api-ossprey-admin-dashboard-v2/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/linuxfoundation/cdp-public-api-ossprey-admin-dashboard-v2/revisions/0156203371f5/schema)
