Composite = sum of sub_score × weight across six metrics. Sub-scores are percentile-rank(log1p(min(raw, p95))) within the Update/Supported cohort (53 releases). Sub-scores for lower-is-better metrics are flipped to 100 − percentile.
* = raw value was clipped at the cohort 95th percentile to prevent outliers from compressing everyone else's scores. Sub-scores marked "med" substitute the cohort median where the input was missing (e.g. first patch on a minor line has no prior patch for net-fix delta).
Added: Project Auditor: Added Descriptor.IsSupported, so analyzers can check if an issue is valid for the current platform/version.