Skip to content
01 · Leaderboard

Every repository, ranked by what the code actually says

844 publicly analysed repositories, ordered by codebase health - dead code, complexity, test file ratio, duplication and file size. Every figure here was computed, not estimated, and every row opens the report it came from.

What breaks first

On expressjs/express, changing eb9df264-6bc3-46e3-b9db-f9bf0a63bdfa/index.js affects 109 other files.

96 directly · 13 transitively

That is ArchSetu's blast-radius graph, traced automatically for every file in every repo it scans - not a health score, an actual dependency trace. A real result, computed live from that repository's own imports, not a mockup.

Open the Change Impact graph

Dead code is attack surface

Unreachable code still ships in your bundle. It can hide a forgotten auth check or a deprecated endpoint nobody is patching.

Complexity hides bugs from review

More branches means more edge cases a reviewer can miss - high-complexity functions are where vulnerabilities go unnoticed the longest.

Undeclared imports are supply-chain risk

A package imported but never declared can silently disappear or get typosquatted - see the Dependencies tab on any report.

Repos analysed

844

Functions scanned

8,939,403

Dead functions found

2,020,827

Lines of code scanned

338,537,763

02 · Reference

Reference repositories

Vetted, well-known open-source projects, analysed on the same terms as everything else.

Reference repositories ranked by health score
RankRepositoryLanguageHealthAvg complexityDead codeScan timeLast analysed
1expressjs/express★ 69,269JavaScript
98/100A+
1.10 / 1,6531.7s2mo ago
2django/django★ 91,419Python
96/100A+
1.81,227 / 32,90010.6s6d ago
03 · Community

Community-submitted repositories

Analysed by other visitors. Unvetted - the numbers are computed identically, but nobody has checked that the repository is what it claims to be.

Community-submitted repositories ranked by health score
RankRepositoryLanguageHealthAvg complexityDead codeScan timeLast analysed
1argotorg/solidity★ 25,684C++
98/100A+
1.53,227 / 16,01113.6s2mo ago
2mockery/mockery★ 10,725PHP
98/100A+
1.6170 / 1,5955.3s2mo ago
3doctrine/instantiator★ 10,995PHP
98/100A+
1.423 / 530.7s2mo ago
4twitter/finatra★ 2,272Scala
97/100A+
2.0404 / 1,3522.6s2mo ago
5pallets/flask★ 72,014Python
97/100A+
1.3305 / 1,4911.9s2mo ago
6joernio/joern★ 3,355Scala
96/100A+
2.11,008 / 7,3956.8s2mo ago
7javalin/javalin★ 8,316Kotlin
96/100A+
2.3333 / 1,6021.5s2mo ago
8Kotlin/kotlinx.coroutines★ 13,801Kotlin
96/100A+
1.9463 / 6,2163.3s2mo ago
9swiftlang/swift★ 0Swift
96/100A+
2.020,000 / 133,058-2mo ago
10SwifterSwift/SwifterSwift★ 15,145Swift
96/100A+
2.031 / 1,2142.1s2mo ago
11v8/v8★ 0C++
96/100A+
2.020,000 / 94,537-2mo ago
12google/googletest★ 38,860C++
96/100A+
1.61,224 / 2,7845.6s2mo ago
13doctrine/lexer★ 11,152PHP
96/100A+
1.53 / 540.6s2mo ago
14sebastianbergmann/phpunit★ 20,045PHP
96/100A+
1.8378 / 10,94934.1s2mo ago
15scrapy/scrapy★ 63,404Python
96/100A+
1.5320 / 5,4223.4s2mo ago
16tiangolo/fastapi★ 101,555Python
95/100A+
1.3711 / 4,2107.6s2mo ago
17stephencelis/SQLite.swift★ 10,186Swift
95/100A+
1.980 / 1,0141.3s2mo ago
18mxcl/PromiseKit★ 14,233Swift
95/100A+
2.530 / 5390.9s2mo ago
19serbanghita/Mobile-Detect★ 10,681PHP
95/100A+
2.629 / 1951.2s2mo ago
20barryvdh/laravel-ide-helper★ 14,955PHP
95/100A+
2.1473 / 7931.1s2mo ago
21sharkdp/bat★ 59,869Rust
95/100A+
2.2461 / 1,4902.6s2mo ago
22trekhleb/javascript-algorithms★ 196,328JavaScript
94/100A+
2.813 / 6405.8s13d ago
23rust-lang/rust★ 0Rust
94/100A+
2.420,000 / 93,40828.8s29d ago
24home-assistant/core★ 0Python
94/100A+
1.56,428 / 117,62737.8s29d ago
25SwiftyJSON/SwiftyJSON★ 22,946Swift
94/100A+
2.38 / 1720.8s2mo ago