Skip to content
01 · Leaderboard

Every repository, ranked by what the code actually says

844 publicly analysed repositories, ordered by codebase health - dead code, complexity, test file ratio, duplication and file size. Every figure here was computed, not estimated, and every row opens the report it came from.

What breaks first

On expressjs/express, changing eb9df264-6bc3-46e3-b9db-f9bf0a63bdfa/index.js affects 109 other files.

96 directly · 13 transitively

That is ArchSetu's blast-radius graph, traced automatically for every file in every repo it scans - not a health score, an actual dependency trace. A real result, computed live from that repository's own imports, not a mockup.

Open the Change Impact graph

Dead code is attack surface

Unreachable code still ships in your bundle. It can hide a forgotten auth check or a deprecated endpoint nobody is patching.

Complexity hides bugs from review

More branches means more edge cases a reviewer can miss - high-complexity functions are where vulnerabilities go unnoticed the longest.

Undeclared imports are supply-chain risk

A package imported but never declared can silently disappear or get typosquatted - see the Dependencies tab on any report.

Repos analysed

844

Functions scanned

8,939,403

Dead functions found

2,020,827

Lines of code scanned

338,537,763

02 · Reference

Reference repositories

Vetted, well-known open-source projects, analysed on the same terms as everything else.

Reference repositories ranked by health score
RankRepositoryLanguageHealthAvg complexityDead codeScan timeLast analysed
1expressjs/express★ 69,269JavaScript
98/100A+
1.10 / 1,6531.7s2mo ago
2django/django★ 91,419Python
96/100A+
1.81,227 / 32,90010.6s7d ago
03 · Community

Community-submitted repositories

Analysed by other visitors. Unvetted - the numbers are computed identically, but nobody has checked that the repository is what it claims to be.

Community-submitted repositories ranked by health score
RankRepositoryLanguageHealthAvg complexityDead codeScan timeLast analysed
301netty/netty★ 35,011Java
83/100A
2.120,000 / 54,92419.4s2mo ago
302google/comprehensive-rust★ 33,267Rust
83/100A
2.729 / 2183.6s2mo ago
303pola-rs/polars★ 39,099Rust
83/100A
2.81,862 / 15,67411.7s2mo ago
304github/github-mcp-server★ 31,704Go
83/100A
4.5687 / 1,8343.5s2mo ago
305binwiederhier/ntfy★ 32,198Go
83/100A
3.31,204 / 3,0907.5s2mo ago
306docker/compose★ 37,886Go
83/100A
2.9768 / 2,1152.1s2mo ago
307istio/istio★ 38,300Go
83/100A
3.73,955 / 16,06712.5s2mo ago
308go-gorm/gorm★ 39,884Go
83/100A
6.3574 / 1,2311.4s2mo ago
309XTLS/Xray-core★ 40,624Go
83/100A
3.11,784 / 7,0963.7s2mo ago
310hashicorp/terraform★ 49,289Go
83/100A
3.76,763 / 17,92813.3s2mo ago
311ethereum/go-ethereum★ 51,213Go
83/100A
3.84,205 / 16,70912.1s2mo ago
312wagoodman/dive★ 54,356Go
83/100A
3.0122 / 5321.6s2mo ago
313rclone/rclone★ 58,692Go
83/100A
3.62,221 / 11,8706.7s2mo ago
314bregman-arie/devops-exercises★ 83,378Python
83/100A
2.111 / 511.5s2mo ago
315circlefin/starknet-cctp★ 1TypeScript
82/100A
2.50 / 670.9s15d ago
316circlefin/arc-node★ 194Rust
82/100A
2.41,942 / 7,4237.3s19d ago
317affaan-m/ECC★ 233,111JavaScript
82/100A
5.4376 / 6,8625.4s1mo ago
318OWASP/CheatSheetSeries★ 0Python
82/100A
2.33 / 8-2mo ago
319typelevel/scalacheck★ 1,966Scala
82/100A
7.4132 / 5641.2s2mo ago
320typelevel/cats★ 5,451Scala
82/100A
4.1643 / 3,3294.9s2mo ago
321uber/RIBs★ 7,931Kotlin
82/100A
1.8635 / 1,7662.3s2mo ago
322AppIntro/AppIntro★ 10,574Kotlin
82/100A
2.449 / 2291.5s2mo ago
323lysine-dev/okhttp★ 47,013Kotlin
82/100A
2.61,869 / 6,3333.1s2mo ago
324apple/containerization★ 8,848Swift
82/100A
3.1528 / 2,4782.4s2mo ago
325zephyrproject-rtos/zephyr★ 0C
82/100A
3.820,000 / 105,805-2mo ago