Skip to content
01 · Leaderboard

Every repository, ranked by what the code actually says

844 publicly analysed repositories, ordered by codebase health - dead code, complexity, test file ratio, duplication and file size. Every figure here was computed, not estimated, and every row opens the report it came from.

What breaks first

On expressjs/express, changing eb9df264-6bc3-46e3-b9db-f9bf0a63bdfa/index.js affects 109 other files.

96 directly · 13 transitively

That is ArchSetu's blast-radius graph, traced automatically for every file in every repo it scans - not a health score, an actual dependency trace. A real result, computed live from that repository's own imports, not a mockup.

Open the Change Impact graph

Dead code is attack surface

Unreachable code still ships in your bundle. It can hide a forgotten auth check or a deprecated endpoint nobody is patching.

Complexity hides bugs from review

More branches means more edge cases a reviewer can miss - high-complexity functions are where vulnerabilities go unnoticed the longest.

Undeclared imports are supply-chain risk

A package imported but never declared can silently disappear or get typosquatted - see the Dependencies tab on any report.

Repos analysed

844

Functions scanned

8,939,403

Dead functions found

2,020,827

Lines of code scanned

338,537,763

02 · Reference

Reference repositories

Vetted, well-known open-source projects, analysed on the same terms as everything else.

Reference repositories ranked by health score
RankRepositoryLanguageHealthAvg complexityDead codeScan timeLast analysed
1expressjs/express★ 69,269JavaScript
98/100A+
1.10 / 1,6531.7s2mo ago
2django/django★ 91,419Python
96/100A+
1.81,227 / 32,90010.6s6d ago
03 · Community

Community-submitted repositories

Analysed by other visitors. Unvetted - the numbers are computed identically, but nobody has checked that the repository is what it claims to be.

Community-submitted repositories ranked by health score
RankRepositoryLanguageHealthAvg complexityDead codeScan timeLast analysed
51facebook/folly★ 30,472C++
92/100A+
1.96,713 / 20,28311.0s2mo ago
52tymondesigns/jwt-auth★ 11,495PHP
92/100A+
1.659 / 5560.8s2mo ago
53symfony/symfony★ 31,110PHP
92/100A+
3.24,219 / 43,8051m 30s2mo ago
54labstack/echo★ 32,558Go
92/100A+
2.8704 / 1,2871.8s2mo ago
55zeromicro/go-zero★ 33,219Go
92/100A+
2.22,886 / 7,6623.8s2mo ago
56gin-gonic/gin★ 88,967Go
92/100A+
1.9643 / 1,3361.3s2mo ago
57circlefin/arc-remote-signer★ 14Go
91/100A+
2.2538 / 1,0641.4s18d ago
58react/react★ 0JavaScript
91/100A+
3.6490 / 24,38222.4s1mo ago
59rails/rails★ 58,638Ruby
91/100A+
2.49,007 / 41,2133.6s1mo ago
60apache/openwhisk★ 6,789Scala
91/100A+
3.1623 / 2,1193.1s2mo ago
61scala/scala★ 14,545Scala
91/100A+
4.38,636 / 32,95743.0s2mo ago
62mobile-dev-inc/Maestro★ 0Kotlin
91/100A+
3.0296 / 2,524-2mo ago
63iamgio/quarkdown★ 15,814Kotlin
91/100A+
2.0345 / 2,6443.3s2mo ago
64dmlc/xgboost★ 28,599C++
91/100A+
2.11,388 / 5,6774.8s2mo ago
65doctrine/inflector★ 11,345PHP
91/100A+
1.834 / 2110.8s2mo ago
66ramsey/uuid★ 12,630PHP
91/100A+
2.8149 / 1,0151.8s2mo ago
67spatie/laravel-permission★ 12,940PHP
91/100A+
3.261 / 2511.0s2mo ago
68PHP-CS-Fixer/PHP-CS-Fixer★ 13,547PHP
91/100A+
3.31,042 / 12,1246.4s2mo ago
69briannesbitt/Carbon★ 16,611PHP
91/100A+
2.377 / 4,6256.6s2mo ago
70LuckyPennySoftware/MediatR★ 11,851C#
91/100A+
2.5523 / 5231.2s2mo ago
71brettwooldridge/HikariCP★ 21,160Java
91/100A+
2.0989 / 1,8471.3s2mo ago
72google/gson★ 24,227Java
91/100A+
2.21,248 / 4,2032.2s2mo ago
73skylot/jadx★ 49,778Java
91/100A+
2.21,855 / 13,9326.2s2mo ago
74swc-project/swc★ 34,140JavaScript
91/100A+
3.5980 / 19,1981m 23s2mo ago
75iluwatar/java-design-patterns★ 94,243Java
90/100A+
1.51,995 / 5,6782.9s1mo ago