Code We Trust · Quality Benchmarks

Rank any industry's open-source peer group.

Aggregate distributions over curated OSS corpora, refreshed quarterly. Start with a worked example, then rank every project in an industry field-by-field.

A Sample Benchmark Explained

Benchmark metric averages

Tech Debt %
72.4%
Defects/10K LOC
32.3
Blocker Smells/10K
34.4
Duplication %
6.2%
Dup Blocks/10K
621.4
Hardcoded/10K
7.9
Long Methods (total)
38.3
Long Classes (total)
129
Vuln/10K LOC
2.3
Critical Vulns (total)
43.4
Hotspots/10K LOC
2.9
Critical Hotspots (total)
115.9
Vulnerable Packages
32.2
High-Risk Licenses
22.7
Outdated Packages %
33.3%
Critically Outdated Packages
37.6
Multi-versioned Packages
16.2
Unknown License Count
35.6
Active Devs (past year)
86.3
Still Active % (all-devs)
55.7%
Commits 12 Months
1031.4
Project-Authored Code %
88.2%
Third-Party Code %
11.3%
Auto-Generated Code %
0.5%
Comment Lines %
14.6%

List of sampled repositories

accelerate

Sampled in the AI Integration benchmark peer group.

github.com/huggingface/accelerate

Activiti

Sampled in the Office Technology benchmark peer group.

github.com/Activiti/Activiti

agentops

Sampled in the AI Integration benchmark peer group.

github.com/AgentOps-AI/agentops

aider

Sampled in the AI Integration, Developer Tools benchmark peer groups.

github.com/Aider-AI/aider

aimeos-core

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/aimeos/aimeos-core

airflow

Sampled in the AI Integration, Logistics Supply Chain, Standard benchmark peer groups.

github.com/apache/airflow

AirSim

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/microsoft/AirSim

akaunting

Sampled in the Fintech Banking, Office Technology benchmark peer groups.

github.com/akaunting/akaunting

aktualizr

Sampled in the Automotive Mobility benchmark peer group.

github.com/uptane/aktualizr

ament_cmake

Sampled in the Robotics Automation benchmark peer group.

github.com/ament/ament_cmake

analysis-ui

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/conveyal/analysis-ui

anthropic-sdk-python

Sampled in the AI Integration benchmark peer group.

github.com/anthropics/anthropic-sdk-python

anthropics/courses

Sampled in the AI Integration, Public Sector Education benchmark peer groups.

github.com/anthropics/courses

anything-llm

Sampled in the AI Integration benchmark peer group.

github.com/Mintplex-Labs/anything-llm

apollo

Sampled in the Automotive Mobility benchmark peer group.

github.com/ApolloAuto/apollo

AppFlowy-Cloud

Sampled in the Office Technology benchmark peer group.

github.com/AppFlowy-IO/AppFlowy-Cloud

Archive-firmware

Sampled in the Distributed IoT benchmark peer group.

github.com/Tasmota/Tasmota

ardupilot

Sampled in the Robotics Automation benchmark peer group.

github.com/ArduPilot/ardupilot

ardupilot_gazebo

Sampled in the Robotics Automation benchmark peer group.

github.com/ArduPilot/ardupilot_gazebo

argo-cd

Sampled in the Standard benchmark peer group.

github.com/argoproj/argo-cd

autogen

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/autogen

autoware

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/autowarefoundation/autoware

autoware_universe

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/autowarefoundation/autoware.universe

aws-iot-device-sdk-embedded-C

Sampled in the Distributed IoT benchmark peer group.

github.com/aws/aws-iot-device-sdk-embedded-C

AWSIM

Sampled in the Automotive Mobility benchmark peer group.

github.com/tier4/AWSIM

bagisto

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/bagisto/bagisto

bahmni-core

Sampled in the Healthcare benchmark peer group.

github.com/Bahmni/bahmni-core

BentoML

Sampled in the AI Integration benchmark peer group.

github.com/bentoml/BentoML

best-of-python-dev

Sampled in the Developer Tools benchmark peer group.

github.com/ml-tooling/best-of-python-dev

besu

Sampled in the Fintech Banking benchmark peer group.

github.com/hyperledger/besu

bitcoin

Sampled in the Fintech Banking benchmark peer group.

github.com/bitcoin/bitcoin

bloom

Sampled in the Robotics Automation benchmark peer group.

github.com/ros-infrastructure/bloom

bonfhir

Sampled in the Healthcare benchmark peer group.

github.com/bonfhir/bonfhir

bpftrace

Sampled in the Standard benchmark peer group.

github.com/bpftrace/bpftrace

brainlid/langchain

Sampled in the AI Integration benchmark peer group.

github.com/brainlid/langchain

BuilderIO/builder

Sampled in the Web Platforms benchmark peer group.

github.com/builderio/builder

bukosabino/ta

Sampled in the Fintech Banking benchmark peer group.

github.com/bukosabino/ta

CANopenNode

Sampled in the Automotive Mobility benchmark peer group.

github.com/CANopenNode/CANopenNode

cardano-node

Sampled in the Fintech Banking benchmark peer group.

github.com/input-output-hk/cardano-node

carla

Sampled in the Automotive Mobility benchmark peer group.

github.com/carla-simulator/carla

carla_garage

Sampled in the Automotive Mobility benchmark peer group.

github.com/autonomousvision/carla_garage

carma-platform

Sampled in the Automotive Mobility benchmark peer group.

github.com/usdot-fhwa-stol/carma-platform

catalyst-runtime

Sampled in the Web Platforms benchmark peer group.

github.com/perl-catalyst/catalyst-runtime

Cbc

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/coin-or/Cbc

ccxt

Sampled in the Fintech Banking benchmark peer group.

github.com/ccxt/ccxt

cds-hooks

Sampled in the Healthcare benchmark peer group.

github.com/cds-hooks/cds-hooks

chariott

Sampled in the Automotive Mobility benchmark peer group.

github.com/eclipse-chariott/chariott

chirpstack

Sampled in the Distributed IoT benchmark peer group.

github.com/chirpstack/chirpstack

chroma

Sampled in the AI Integration benchmark peer group.

github.com/chroma-core/chroma

cilium

Sampled in the Standard benchmark peer group.

github.com/cilium/cilium

claude-cookbooks

Sampled in the AI Integration benchmark peer group.

github.com/anthropics/claude-cookbooks

clearpath_common

Sampled in the Robotics Automation benchmark peer group.

github.com/clearpathrobotics/clearpath_common

client-js

Sampled in the Healthcare benchmark peer group.

github.com/smart-on-fhir/client-js

Cloud-API-Doc

Sampled in the Robotics Automation benchmark peer group.

github.com/dji-sdk/Cloud-API-Doc

clover

Sampled in the Robotics Automation benchmark peer group.

github.com/CopterExpress/clover

coinbase-advanced-py

Sampled in the Fintech Banking benchmark peer group.

github.com/coinbase/coinbase-advanced-py

ComfyUI

Sampled in the AI Integration benchmark peer group.

github.com/comfyanonymous/ComfyUI

CommonDataModel

Sampled in the Healthcare benchmark peer group.

github.com/OHDSI/CommonDataModel

concerto

Sampled in the Developer Tools benchmark peer group.

github.com/accordproject/concerto

continuedev/continue

Sampled in the AI Integration, Developer Tools benchmark peer groups.

github.com/continuedev/continue

control_toolbox

Sampled in the Robotics Automation benchmark peer group.

github.com/ros-controls/control_toolbox

courtlistener

Sampled in the Public Sector Education benchmark peer group.

github.com/freelawproject/courtlistener

crewAI

Sampled in the AI Integration benchmark peer group.

github.com/crewAIInc/crewAI

cyclonedds

Sampled in the Distributed IoT, Robotics Automation benchmark peer groups.

github.com/eclipse-cyclonedds/cyclonedds

cyclos4-ui

Sampled in the Fintech Banking benchmark peer group.

github.com/cyclosproject/cyclos4-ui

darknet

Sampled in the AI Integration, Robotics Automation benchmark peer groups.

github.com/AlexeyAB/darknet

datasets

Sampled in the AI Integration benchmark peer group.

github.com/huggingface/datasets

datatools-server

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/ibi-group/datatools-server

dcm4chee-arc-light

Sampled in the Healthcare benchmark peer group.

github.com/dcm4che/dcm4chee-arc-light

dcmtk

Sampled in the Healthcare benchmark peer group.

github.com/DCMTK/dcmtk

DeepSpeed

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/DeepSpeed

dhis2-core

Sampled in the Healthcare, Public Sector Education benchmark peer groups.

github.com/dhis2/dhis2-core

ditto

Sampled in the Distributed IoT benchmark peer group.

github.com/eclipse/ditto

django

Sampled in the Web Platforms benchmark peer group.

github.com/django/django

DocumentServer

Sampled in the Office Technology benchmark peer group.

github.com/ONLYOFFICE/DocumentServer

dolibarr

Sampled in the Office Technology benchmark peer group.

github.com/Dolibarr/dolibarr

dotfiles

Sampled in the Developer Tools benchmark peer group.

github.com/nicknisi/dotfiles

dronekit-python

Sampled in the Robotics Automation benchmark peer group.

github.com/dronekit/dronekit-python

DSS-Python

Sampled in the Energy Utilities benchmark peer group.

github.com/dss-extensions/DSS-Python

dvc

Sampled in the AI Integration benchmark peer group.

github.com/iterative/dvc

edgex-go

Sampled in the Distributed IoT benchmark peer group.

github.com/edgexfoundry/edgex-go

eigen-git-mirror

Sampled in the Robotics Automation benchmark peer group.

github.com/eigenteam/eigen-git-mirror

element-web

Sampled in the Office Technology benchmark peer group.

github.com/vector-im/element-web

elixir-nx/bumblebee

Sampled in the AI Integration benchmark peer group.

github.com/elixir-nx/bumblebee

emlid-docs

Sampled in the Robotics Automation benchmark peer group.

github.com/emlid/emlid-docs

emonpi

Sampled in the Energy Utilities benchmark peer group.

github.com/openenergymonitor/emonpi

emqx

Sampled in the Distributed IoT benchmark peer group.

github.com/emqx/emqx

EnergyPlus

Sampled in the Energy Utilities benchmark peer group.

github.com/NREL/EnergyPlus

erpnext

Sampled in the Office Technology benchmark peer group.

github.com/frappe/erpnext

erpnext-shipping

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/frappe/erpnext-shipping

esphome

Sampled in the Distributed IoT benchmark peer group.

github.com/esphome/esphome

excalidraw

Sampled in the Office Technology benchmark peer group.

github.com/excalidraw/excalidraw

fabric

Sampled in the Distributed IoT benchmark peer group.

github.com/hyperledger/fabric

fabric-samples

Sampled in the Distributed IoT benchmark peer group.

github.com/hyperledger/fabric-samples

faiss

Sampled in the AI Integration benchmark peer group.

github.com/facebookresearch/faiss

Fast-DDS

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/eProsima/Fast-DDS

fastapi

Sampled in the Web Platforms benchmark peer group.

github.com/tiangolo/fastapi

fcl

Sampled in the Robotics Automation benchmark peer group.

github.com/flexible-collision-library/fcl

feast

Sampled in the AI Integration benchmark peer group.

github.com/feast-dev/feast

fhir

Sampled in the Healthcare benchmark peer group.

github.com/HL7/fhir

FHIR-Converter

Sampled in the Healthcare benchmark peer group.

github.com/microsoft/FHIR-Converter

fhir-ig-publisher

Sampled in the Healthcare benchmark peer group.

github.com/HL7/fhir-ig-publisher

financial-services-accelerator

Sampled in the Fintech Banking benchmark peer group.

github.com/wso2/financial-open-banking

fineract

Sampled in the Fintech Banking benchmark peer group.

github.com/apache/fineract

firefly-iii

Sampled in the Fintech Banking benchmark peer group.

github.com/firefly-iii/firefly-iii

fledge

Sampled in the Distributed IoT benchmark peer group.

github.com/fledge-iot/fledge

fleetbase

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/fleetbase/fleetbase

floris

Sampled in the Energy Utilities benchmark peer group.

github.com/NREL/floris

Flowise

Sampled in the AI Integration benchmark peer group.

github.com/FlowiseAI/Flowise

fluentd

Sampled in the Standard benchmark peer group.

github.com/fluent/fluentd

folo

Sampled in the Developer Tools benchmark peer group.

github.com/folo-rs/folo

gazebo-classic

Sampled in the Robotics Automation benchmark peer group.

github.com/gazebosim/gazebo-classic

genie-toolkit

Sampled in the AI Integration benchmark peer group.

github.com/stanford-oval/genie-toolkit

geoserver

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/geoserver/geoserver

gluonts

Sampled in the AI Integration benchmark peer group.

github.com/awslabs/gluonts

gnucash

Sampled in the Fintech Banking benchmark peer group.

github.com/Gnucash/gnucash

googletest 1

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/google/googletest

goose

Sampled in the AI Integration, Developer Tools benchmark peer groups.

github.com/block/goose

gpt4all

Sampled in the AI Integration benchmark peer group.

github.com/nomic-ai/gpt4all

grafana

Sampled in the Standard benchmark peer group.

github.com/grafana/grafana

graphhopper

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/graphhopper/graphhopper

great_expectations

Sampled in the AI Integration benchmark peer group.

github.com/great-expectations/great_expectations

grid_map

Sampled in the Robotics Automation benchmark peer group.

github.com/ANYbotics/grid_map

gridlab-d

Sampled in the Energy Utilities benchmark peer group.

github.com/gridlab-d/gridlab-d

grunt

Sampled in the Developer Tools benchmark peer group.

github.com/gruntjs/grunt

gs-quant

Sampled in the Fintech Banking benchmark peer group.

github.com/goldmansachs/gs-quant

gtfs-validator

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/MobilityData/gtfs-validator

gtsam

Sampled in the Robotics Automation benchmark peer group.

github.com/borglab/gtsam

guidance

Sampled in the AI Integration benchmark peer group.

github.com/guidance-ai/guidance

gym

Sampled in the AI Integration, Robotics Automation benchmark peer groups.

github.com/openai/gym

gz-sim

Sampled in the Robotics Automation benchmark peer group.

github.com/gazebosim/gz-sim

gz-transport

Sampled in the Robotics Automation benchmark peer group.

github.com/gazebosim/gz-transport

hadoop

Sampled in the Standard benchmark peer group.

github.com/apache/hadoop

hapi-fhir

Sampled in the Healthcare benchmark peer group.

github.com/hapifhir/hapi-fhir

haystack

Sampled in the AI Integration benchmark peer group.

github.com/deepset-ai/haystack

health-architectures

Sampled in the Healthcare benchmark peer group.

github.com/microsoft/health-architectures

health-patterns

Sampled in the Healthcare benchmark peer group.

github.com/Alvearie/health-patterns

healthcare-data-harmonization

Sampled in the Healthcare benchmark peer group.

github.com/GoogleCloudPlatform/healthcare-data-harmonization

home-assistant/core

Sampled in the Distributed IoT benchmark peer group.

github.com/home-assistant/core

home-assistant/operating-system

Sampled in the Distributed IoT benchmark peer group.

github.com/home-assistant/operating-system

home-assistant/supervisor

Sampled in the Distributed IoT benchmark peer group.

github.com/home-assistant/supervisor

hono

Sampled in the Distributed IoT benchmark peer group.

github.com/eclipse/hono

hospitalrun-frontend

Sampled in the Healthcare benchmark peer group.

github.com/HospitalRun/hospitalrun-frontend

hydra

Sampled in the Developer Tools benchmark peer group.

github.com/facebookresearch/hydra

iceoryx

Sampled in the Automotive Mobility benchmark peer group.

github.com/eclipse-iceoryx/iceoryx

idempiere

Sampled in the Office Technology benchmark peer group.

github.com/idempiere/idempiere

inav

Sampled in the Robotics Automation benchmark peer group.

github.com/iNavFlight/inav

influxdb

Sampled in the Distributed IoT, Standard benchmark peer groups.

github.com/influxdata/influxdb

insomnia

Sampled in the Developer Tools benchmark peer group.

github.com/Kong/insomnia

instructor

Sampled in the AI Integration benchmark peer group.

github.com/instructor-ai/instructor

istio

Sampled in the Standard benchmark peer group.

github.com/istio/istio

jax

Sampled in the AI Integration benchmark peer group.

github.com/google/jax

jenkins

Sampled in the Developer Tools benchmark peer group.

github.com/jenkinsci/jenkins

jitsi-meet

Sampled in the Office Technology benchmark peer group.

github.com/jitsi/jitsi-meet

joomla-cms

Sampled in the Web Platforms benchmark peer group.

github.com/joomla/joomla-cms

js-stellar-sdk

Sampled in the Fintech Banking benchmark peer group.

github.com/stellar/js-stellar-sdk

jsprit

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/graphhopper/jsprit

junit5

Sampled in the E-commerce Digital Commerce, Fintech Banking, Healthcare, Office Technology benchmark peer groups.

github.com/junit-team/junit5

kaa

Sampled in the Distributed IoT benchmark peer group.

github.com/kaaproject/kaa

kafka

Sampled in the Distributed IoT, E-commerce Digital Commerce, Fintech Banking, Healthcare, Logistics Supply Chain, Office Technology, Robotics Automation, Standard benchmark peer groups.

github.com/apache/kafka

kinto

Sampled in the Web Platforms benchmark peer group.

github.com/Kinto/kinto

kubeedge

Sampled in the Distributed IoT benchmark peer group.

github.com/kubeedge/kubeedge

kubeflow

Sampled in the AI Integration benchmark peer group.

github.com/kubeflow/kubeflow

kubernetes

Sampled in the Standard benchmark peer group.

github.com/kubernetes/kubernetes

kubo

Sampled in the Distributed IoT benchmark peer group.

github.com/ipfs/kubo

kuksa.val

Sampled in the Automotive Mobility benchmark peer group.

github.com/eclipse/kuksa.val

Lanelet2

Sampled in the Automotive Mobility benchmark peer group.

github.com/fzi-forschungszentrum-informatik/Lanelet2

langchain-ai/langchain

Sampled in the AI Integration benchmark peer group.

github.com/langchain-ai/langchain

langflow

Sampled in the AI Integration benchmark peer group.

github.com/langflow-ai/langflow

langgraph

Sampled in the AI Integration benchmark peer group.

github.com/langchain-ai/langgraph

launch

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/launch

leda

Sampled in the Automotive Mobility benchmark peer group.

github.com/eclipse-leda/leda

legged_gym

Sampled in the Robotics Automation benchmark peer group.

github.com/leggedrobotics/legged_gym

lh-ehr

Sampled in the Healthcare benchmark peer group.

github.com/LibreHealthIO/lh-ehr

libcanard

Sampled in the Automotive Mobility benchmark peer group.

github.com/OpenCyphal/libcanard

librealsense

Sampled in the Robotics Automation benchmark peer group.

github.com/IntelRealSense/librealsense

litellm

Sampled in the AI Integration benchmark peer group.

github.com/BerriAI/litellm

llama_index

Sampled in the AI Integration benchmark peer group.

github.com/run-llama/llama_index

llama.cpp

Sampled in the AI Integration benchmark peer group.

github.com/ggerganov/llama.cpp

magento2

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/magento/magento2

mainflux

Sampled in the Distributed IoT benchmark peer group.

github.com/mainflux/mainflux

markitdown

Sampled in the AI Integration, Office Technology benchmark peer groups.

github.com/microsoft/markitdown

matpower

Sampled in the Energy Utilities benchmark peer group.

github.com/MATPOWER/matpower

matrix-js-sdk

Sampled in the Office Technology benchmark peer group.

github.com/matrix-org/matrix-js-sdk

mattermost

Sampled in the Office Technology benchmark peer group.

github.com/mattermost/mattermost

mavlink

Sampled in the Robotics Automation benchmark peer group.

github.com/mavlink/mavlink

MAVProxy

Sampled in the Robotics Automation benchmark peer group.

github.com/ArduPilot/MAVProxy

MAVSDK

Sampled in the Robotics Automation benchmark peer group.

github.com/Dronecode/DroneCore

medplum-demo-bots

Sampled in the Healthcare benchmark peer group.

github.com/medplum/medplum-demo-bots

medusa

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/medusajs/medusa

mem0

Sampled in the AI Integration benchmark peer group.

github.com/mem0ai/mem0

memos

Sampled in the Office Technology benchmark peer group.

github.com/usememos/memos

meta-agl

Sampled in the Automotive Mobility benchmark peer group.

github.com/automotive-grade-linux/meta-agl

metabase

Sampled in the Office Technology benchmark peer group.

github.com/metabase/metabase

metasfresh

Sampled in the Office Technology benchmark peer group.

github.com/metasfresh/metasfresh

mifos-mobile

Sampled in the Fintech Banking benchmark peer group.

github.com/openMF/mifos-mobile

mifos-pay

Sampled in the Fintech Banking benchmark peer group.

github.com/openMF/mobile-wallet

milvus

Sampled in the AI Integration benchmark peer group.

github.com/milvus-io/milvus

minke

Sampled in the Public Sector Education benchmark peer group.

github.com/transientlunatic/minke

mlc-llm

Sampled in the AI Integration benchmark peer group.

github.com/mlc-ai/mlc-llm

mlflow

Sampled in the AI Integration benchmark peer group.

github.com/mlflow/mlflow

Mobile-SDK-Android

Sampled in the Robotics Automation benchmark peer group.

github.com/dji-sdk/Mobile-SDK-Android

moby

Sampled in the Standard benchmark peer group.

github.com/moby/moby

monero

Sampled in the Fintech Banking benchmark peer group.

github.com/monero-project/monero

moodle

Sampled in the Public Sector Education benchmark peer group.

github.com/moodle/moodle

mosquitto

Sampled in the Distributed IoT benchmark peer group.

github.com/eclipse-mosquitto/mosquitto

moveit_task_constructor

Sampled in the Robotics Automation benchmark peer group.

github.com/moveit/moveit_task_constructor

moveit2

Sampled in the Robotics Automation benchmark peer group.

github.com/moveit/moveit2

mrpt

Sampled in the Robotics Automation benchmark peer group.

github.com/MRPT/mrpt

msgq

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/commaai/cereal

n8n

Sampled in the AI Integration, Office Technology benchmark peer groups.

github.com/n8n-io/n8n

nanochat

Sampled in the AI Integration benchmark peer group.

github.com/karpathy/nanochat

NatLabRockies/SAM

Sampled in the Energy Utilities benchmark peer group.

github.com/NREL/SAM

navigation2

Sampled in the Robotics Automation benchmark peer group.

github.com/ros-planning/navigation2

netbox

Sampled in the Standard benchmark peer group.

github.com/netbox-community/netbox

netdata

Sampled in the Standard benchmark peer group.

github.com/netdata/netdata

nextcloud/server

Sampled in the Office Technology benchmark peer group.

github.com/nextcloud/server

nginx

Sampled in the Automotive Mobility, Distributed IoT, E-commerce Digital Commerce, Fintech Banking, Healthcare, Logistics Supply Chain, Office Technology, Robotics Automation benchmark peer groups.

github.com/nginx/nginx

NiceHashMiner

Sampled in the Fintech Banking benchmark peer group.

github.com/nicehash/NiceHashMiner

NiceHashQuickMiner

Sampled in the Fintech Banking benchmark peer group.

github.com/nicehash/NiceHashQuickMiner

node

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/nodejs/node

node-on-fhir/cookbook

Sampled in the Healthcare benchmark peer group.

github.com/clinical-meteor/clinical-meteor

node-red

Sampled in the Distributed IoT benchmark peer group.

github.com/node-red/node-red

node-red-dashboard

Sampled in the Distributed IoT benchmark peer group.

github.com/node-red/node-red-dashboard

nuclei-templates

Sampled in the Standard benchmark peer group.

github.com/projectdiscovery/nuclei-templates

ODM

Sampled in the Robotics Automation benchmark peer group.

github.com/OpenDroneMap/ODM

odoo

Sampled in the Office Technology benchmark peer group.

github.com/odoo/odoo

ofbiz-framework

Sampled in the Office Technology benchmark peer group.

github.com/apache/ofbiz-framework

OHIF/Viewers

Sampled in the Healthcare benchmark peer group.

github.com/OHIF/Viewers

ollama

Sampled in the AI Integration benchmark peer group.

github.com/ollama/ollama

ollama-python

Sampled in the AI Integration benchmark peer group.

github.com/jmorganca/ollama-python

ompl

Sampled in the Robotics Automation benchmark peer group.

github.com/ompl/ompl

onnx

Sampled in the AI Integration benchmark peer group.

github.com/onnx/onnx

onnxruntime

Sampled in the AI Integration, Robotics Automation, Standard benchmark peer groups.

github.com/microsoft/onnxruntime

onnxruntime-genai

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/onnxruntime-genai

opa

Sampled in the AI Integration benchmark peer group.

github.com/open-policy-agent/opa

open62541 1

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/open62541/open62541

openai-python

Sampled in the AI Integration benchmark peer group.

github.com/openai/openai-python

openboxes

Sampled in the Healthcare, Logistics Supply Chain benchmark peer groups.

github.com/openboxes/openboxes

opencart

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/opencart/opencart

opencv

Sampled in the Robotics Automation benchmark peer group.

github.com/opencv/opencv

opendbc

Sampled in the Automotive Mobility benchmark peer group.

github.com/commaai/opendbc

OpenDDS

Sampled in the Automotive Mobility benchmark peer group.

github.com/OpenDDS/OpenDDS

opendsm

Sampled in the Energy Utilities benchmark peer group.

github.com/openeemeter/eemeter

openelisglobal-core

Sampled in the Healthcare benchmark peer group.

github.com/openelisglobal/openelisglobal-core

openemr

Sampled in the Healthcare benchmark peer group.

github.com/openemr/openemr

openems

Sampled in the Distributed IoT, Energy Utilities benchmark peer groups.

github.com/OpenEMS/openems

openfast

Sampled in the Energy Utilities benchmark peer group.

github.com/OpenFAST/openfast

openhab-core

Sampled in the Distributed IoT benchmark peer group.

github.com/openhab/openhab-core

OpenHands

Sampled in the AI Integration, Developer Tools benchmark peer groups.

github.com/All-Hands-AI/OpenHands

openhospital-core

Sampled in the Healthcare benchmark peer group.

github.com/informatici/openhospital-core

openinterpreter

Sampled in the AI Integration, Developer Tools benchmark peer groups.

github.com/OpenInterpreter/open-interpreter

openlayers

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/openlayers/openlayers

OpenLegalCode

Sampled in the Public Sector Education benchmark peer group.

github.com/openlegalcode/openlegalcode

openlmis-ref-distro

Sampled in the Healthcare, Logistics Supply Chain benchmark peer groups.

github.com/OpenLMIS/openlmis-ref-distro

openmrs-core

Sampled in the Healthcare benchmark peer group.

github.com/openmrs/openmrs-core

openmrs-module-fhir2

Sampled in the Healthcare benchmark peer group.

github.com/openmrs/openmrs-module-fhir2

openpilot

Sampled in the Automotive Mobility benchmark peer group.

github.com/commaai/openpilot

openrave

Sampled in the Robotics Automation benchmark peer group.

github.com/rdiankov/openrave

openremote

Sampled in the Distributed IoT benchmark peer group.

github.com/openremote/openremote

openrouteservice

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/GIScience/openrouteservice

OpenSearch

Sampled in the E-commerce Digital Commerce, Logistics Supply Chain, Standard benchmark peer groups.

github.com/opensearch-project/OpenSearch

opensky-api

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/openskynetwork/opensky-api

openslam_gmapping

Sampled in the Robotics Automation benchmark peer group.

github.com/OpenSLAM-org/openslam_gmapping

openstef

Sampled in the Energy Utilities benchmark peer group.

github.com/OpenSTEF/openstef

OpenStudio

Sampled in the Energy Utilities benchmark peer group.

github.com/NREL/OpenStudio

opentelemetry-python

Sampled in the Standard benchmark peer group.

github.com/open-telemetry/opentelemetry-python

OpenTripPlanner

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/opentripplanner/OpenTripPlanner

or-tools

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/google/or-tools

org.openwms

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/openwms/org.openwms

Orthanc

Sampled in the Healthcare benchmark peer group.

github.com/jodogne/Orthanc

OrthancMirror

Sampled in the Healthcare benchmark peer group.

github.com/jodogne/OrthancMirror

osrm-backend

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/Project-OSRM/osrm-backend

osrm-frontend

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/Project-OSRM/osrm-frontend

otp-ui

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/opentripplanner/otp-ui

outline

Sampled in the Office Technology benchmark peer group.

github.com/outline/outline

outlines

Sampled in the AI Integration benchmark peer group.

github.com/dottxt-ai/outlines

owncloud/core

Sampled in the Office Technology benchmark peer group.

github.com/owncloud/core

pacmod3

Sampled in the Automotive Mobility benchmark peer group.

github.com/astuff/pacmod3

paho.mqtt.python

Sampled in the Distributed IoT benchmark peer group.

github.com/eclipse-paho/paho.mqtt.python

pandapower

Sampled in the Energy Utilities benchmark peer group.

github.com/e2nIEE/pandapower

paparazzi

Sampled in the Robotics Automation benchmark peer group.

github.com/paparazzi/paparazzi

Payload-SDK

Sampled in the Robotics Automation benchmark peer group.

github.com/dji-sdk/Payload-SDK

perplexityai/bumblebee

Sampled in the Developer Tools benchmark peer group.

github.com/perplexityai/bumblebee

phenopacket-schema

Sampled in the Healthcare benchmark peer group.

github.com/phenopackets/phenopacket-schema

phpbb

Sampled in the Web Platforms benchmark peer group.

github.com/phpbb/phpbb

pipecat

Sampled in the AI Integration benchmark peer group.

github.com/pipecat-ai/pipecat

plaid-python

Sampled in the Fintech Banking benchmark peer group.

github.com/plaid/plaid-python

platform_frameworks_base

Sampled in the Standard benchmark peer group.

github.com/aosp-mirror/platform_frameworks_base

pmorissette/bt

Sampled in the Fintech Banking benchmark peer group.

github.com/pmorissette/bt

PowerModels.jl

Sampled in the Energy Utilities benchmark peer group.

github.com/lanl-ansi/PowerModels.jl

presidio

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/presidio

PrestaShop

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/PrestaShop/PrestaShop

prometheus

Sampled in the Automotive Mobility, Distributed IoT, E-commerce Digital Commerce, Fintech Banking, Healthcare, Logistics Supply Chain, Robotics Automation, Standard benchmark peer groups.

github.com/prometheus/prometheus

promptflow

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/promptflow

pryre/robin

Sampled in the Robotics Automation benchmark peer group.

github.com/qutas/robin

pulsar

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/apache/pulsar

pulumi

Sampled in the Standard benchmark peer group.

github.com/pulumi/pulumi

pvlib-python

Sampled in the Energy Utilities benchmark peer group.

github.com/pvlib/pvlib-python

px4_msgs

Sampled in the Robotics Automation benchmark peer group.

github.com/PX4/px4_msgs

PX4-Autopilot 1

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/PX4/PX4-Autopilot

PX4-Avoidance

Sampled in the Robotics Automation benchmark peer group.

github.com/PX4/PX4-Avoidance

px4-ros2-interface-lib

Sampled in the Robotics Automation benchmark peer group.

github.com/Auterion/px4-ros2-interface-lib

PX4-SITL_gazebo-classic

Sampled in the Robotics Automation benchmark peer group.

github.com/PX4/PX4-SITL_gazebo-classic

pycyphal

Sampled in the Robotics Automation benchmark peer group.

github.com/UAVCAN/pyuavcan

pydantic

Sampled in the AI Integration benchmark peer group.

github.com/pydantic/pydantic

pykitti

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/utiasSTARS/pykitti

pyproj

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/pyproj4/pyproj

PyPSA

Sampled in the Energy Utilities benchmark peer group.

github.com/PyPSA/PyPSA

pysunspec2

Sampled in the Energy Utilities benchmark peer group.

github.com/sunspec/pysunspec2

PySyft

Sampled in the AI Integration benchmark peer group.

github.com/OpenMined/PySyft

pytest

Sampled in the Developer Tools benchmark peer group.

github.com/pytest-dev/pytest

PythonAPI

Sampled in the Automotive Mobility benchmark peer group.

github.com/lgsvl/PythonAPI

pytorch-lightning

Sampled in the AI Integration benchmark peer group.

github.com/Lightning-AI/pytorch-lightning

QuantLib

Sampled in the Fintech Banking benchmark peer group.

github.com/lballabio/QuantLib

r5

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/conveyal/r5

rails

Sampled in the Web Platforms benchmark peer group.

github.com/rails/rails

ravens

Sampled in the Robotics Automation benchmark peer group.

github.com/google-research/ravens

ray

Sampled in the AI Integration benchmark peer group.

github.com/ray-project/ray

rcl

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/rcl

rclcpp

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/rclcpp

rclpy

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/rclpy

react

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/facebook/react

reactioncommerce/reaction

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/reactioncommerce/reaction

recap-chrome

Sampled in the Public Sector Education benchmark peer group.

github.com/freelawproject/recap-chrome

rippled

Sampled in the Fintech Banking benchmark peer group.

github.com/ripple/rippled

rmw

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/rmw

rmw_fastrtps

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/rmw_fastrtps

Rocket.Chat

Sampled in the Office Technology benchmark peer group.

github.com/RocketChat/Rocket.Chat

ros_comm

Sampled in the Robotics Automation benchmark peer group.

github.com/ros/ros_comm

ros-noetic

Sampled in the Robotics Automation benchmark peer group.

github.com/RoboStack/ros-noetic

ros2

Sampled in the Automotive Mobility, Robotics Automation, Standard benchmark peer groups.

github.com/ros2/ros2

ros2_control

Sampled in the Robotics Automation benchmark peer group.

github.com/ros-controls/ros2_control

rosbot_ros

Sampled in the Robotics Automation benchmark peer group.

github.com/husarion/rosbot_ros

rosidl

Sampled in the Robotics Automation benchmark peer group.

github.com/ros2/rosidl

rotors_simulator

Sampled in the Robotics Automation benchmark peer group.

github.com/ethz-asl/rotors_simulator

rqt_joint_trajectory_plot

Sampled in the Robotics Automation benchmark peer group.

github.com/tork-a/rqt_joint_trajectory_plot

saleor

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/saleor/saleor

scenario_simulator_v2

Sampled in the Automotive Mobility benchmark peer group.

github.com/tier4/scenario_simulator_v2

scholarphi

Sampled in the Public Sector Education benchmark peer group.

github.com/allenai/scholarphi

self-driving-car-sim

Sampled in the Automotive Mobility benchmark peer group.

github.com/udacity/self-driving-car-sim

semantic-kernel

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/semantic-kernel

server

Sampled in the Office Technology benchmark peer group.

github.com/MariaDB/server

shopware

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/shopware/shopware

simfin

Sampled in the Fintech Banking benchmark peer group.

github.com/SimFin/simfin

siyuan

Sampled in the Office Technology benchmark peer group.

github.com/siyuan-note/siyuan

slacgismo/TESS

Sampled in the Energy Utilities benchmark peer group.

github.com/slacgismo/TESS

sllidar_ros2

Sampled in the Robotics Automation benchmark peer group.

github.com/Slamtec/sllidar_ros2

smolagents

Sampled in the AI Integration benchmark peer group.

github.com/huggingface/smolagents

snappi

Sampled in the Developer Tools benchmark peer group.

github.com/open-traffic-generator/snappi

SOEM 1

Sampled in the Automotive Mobility, Robotics Automation benchmark peer groups.

github.com/OpenEtherCATsociety/SOEM

soft-robot-control

Sampled in the Robotics Automation benchmark peer group.

github.com/StanfordASL/soft-robot-control

solidus

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/solidusio/solidus

spaCy

Sampled in the AI Integration benchmark peer group.

github.com/explosion/spaCy

spark

Sampled in the Standard benchmark peer group.

github.com/apache/spark

spark-nlp

Sampled in the AI Integration benchmark peer group.

github.com/JohnSnowLabs/spark-nlp

spree

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/spree/spree

spree-starter

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/spree/spree_starter

spring-framework

Sampled in the Healthcare benchmark peer group.

github.com/spring-projects/spring-framework

standardnotes/app

Sampled in the Office Technology benchmark peer group.

github.com/standardnotes/app

stellar-core

Sampled in the Fintech Banking benchmark peer group.

github.com/stellar/stellar-core

stockstats

Sampled in the Fintech Banking benchmark peer group.

github.com/jealous/stockstats

streetmix

Sampled in the Public Sector Education benchmark peer group.

github.com/codeforamerica/streetmix

stripe-java

Sampled in the E-commerce Digital Commerce, Fintech Banking benchmark peer groups.

github.com/stripe/stripe-java

stripe-node

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/stripe/stripe-node

struts

Sampled in the Web Platforms benchmark peer group.

github.com/apache/struts

substrate

Sampled in the Distributed IoT benchmark peer group.

github.com/paritytech/substrate

superagentx

Sampled in the AI Integration benchmark peer group.

github.com/superagentxai/superagentx

superset

Sampled in the Office Technology benchmark peer group.

github.com/apache/superset

Sylius

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/Sylius/Sylius

synthea

Sampled in the Healthcare benchmark peer group.

github.com/synthetichealth/synthea

tabula

Sampled in the Office Technology benchmark peer group.

github.com/tabulapdf/tabula

task-specific-datasets

Sampled in the AI Integration benchmark peer group.

github.com/PolyAI-LDN/task-specific-datasets

Tasmota

Sampled in the Distributed IoT benchmark peer group.

github.com/arendst/Tasmota

telegraf

Sampled in the Standard benchmark peer group.

github.com/influxdata/telegraf

tensorflow

Sampled in the AI Integration benchmark peer group.

github.com/tensorflow/tensorflow

teslamotors/light-show

Sampled in the Automotive Mobility benchmark peer group.

github.com/teslamotors/light-show

texthero

Sampled in the AI Integration benchmark peer group.

github.com/jbesomi/texthero

tf-quant-finance

Sampled in the Fintech Banking benchmark peer group.

github.com/google/tf-quant-finance

thingsboard

Sampled in the Distributed IoT benchmark peer group.

github.com/thingsboard/thingsboard

thingsboard-gateway

Sampled in the Distributed IoT benchmark peer group.

github.com/thingsboard/thingsboard-gateway

timescaledb

Sampled in the Standard benchmark peer group.

github.com/timescale/timescaledb

traccar

Sampled in the Distributed IoT, Logistics Supply Chain benchmark peer groups.

github.com/traccar/traccar

trafilatura

Sampled in the AI Integration benchmark peer group.

github.com/adbar/trafilatura

transformers

Sampled in the AI Integration benchmark peer group.

github.com/huggingface/transformers

TriliumNext/Notes

Sampled in the Office Technology benchmark peer group.

github.com/triliumnext/notes

triton

Sampled in the AI Integration benchmark peer group.

github.com/openai/triton

trl

Sampled in the AI Integration benchmark peer group.

github.com/huggingface/trl

tryton

Sampled in the Office Technology benchmark peer group.

github.com/tryton/tryton

twenty

Sampled in the Office Technology benchmark peer group.

github.com/twentyhq/twenty

TypeAgent

Sampled in the AI Integration benchmark peer group.

github.com/microsoft/TypeAgent

uaa

Sampled in the Standard benchmark peer group.

github.com/cloudfoundry/uaa

up-spec

Sampled in the Automotive Mobility benchmark peer group.

github.com/eclipse-uprotocol/up-spec

uservices

Sampled in the Automotive Mobility benchmark peer group.

github.com/COVESA/uservices

valhalla

Sampled in the Logistics Supply Chain benchmark peer group.

github.com/valhalla/valhalla

vault

Sampled in the Standard benchmark peer group.

github.com/hashicorp/vault

vehicle_signal_interface

Sampled in the Automotive Mobility benchmark peer group.

github.com/COVESA/vehicle_signal_interface

vehicle_signal_specification

Sampled in the Automotive Mobility benchmark peer group.

github.com/GENIVI/vehicle_signal_specification

vehicle-app-python-sdk

Sampled in the Automotive Mobility benchmark peer group.

github.com/eclipse-velocitas/vehicle-app-python-sdk

vendure

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/vendure-ecommerce/vendure

vernemq

Sampled in the Distributed IoT benchmark peer group.

github.com/VerneMQ/vernemq

victronenergy/venus

Sampled in the Energy Utilities benchmark peer group.

github.com/victronenergy/venus

vllm

Sampled in the AI Integration benchmark peer group.

github.com/vllm-project/vllm

volttron

Sampled in the Energy Utilities benchmark peer group.

github.com/VOLTTRON/volttron

vrx

Sampled in the Robotics Automation benchmark peer group.

github.com/osrf/vrx

vscode

Sampled in the Developer Tools benchmark peer group.

github.com/microsoft/vscode

vscode-copilot-release

Sampled in the Developer Tools benchmark peer group.

github.com/microsoft/vscode-copilot-release

watchdog

Sampled in the Developer Tools benchmark peer group.

github.com/aaronsw/watchdog

wavemap

Sampled in the Robotics Automation benchmark peer group.

github.com/ethz-asl/wavemap

weaviate

Sampled in the AI Integration benchmark peer group.

github.com/weaviate/weaviate

webots

Sampled in the Robotics Automation benchmark peer group.

github.com/cyberbotics/webots

woocommerce

Sampled in the E-commerce Digital Commerce benchmark peer group.

github.com/woocommerce/woocommerce

WordPress

Sampled in the Web Platforms benchmark peer group.

github.com/WordPress/WordPress

wp-graphql

Sampled in the Web Platforms benchmark peer group.

github.com/wp-graphql/wp-graphql

yfinance

Sampled in the Fintech Banking benchmark peer group.

github.com/ranaroussi/yfinance

zep

Sampled in the AI Integration benchmark peer group.

github.com/getzep/zep

zigbee-herdsman

Sampled in the Distributed IoT benchmark peer group.

github.com/Koenkk/zigbee-herdsman

zulip

Sampled in the Office Technology benchmark peer group.

github.com/zulip/zulip

Benchmarks by Industry

Select an industry to benchmark its peer group of open-source projects — optionally highlight a specific repository to compare it against the rest.

Select an industry to view its benchmark

OSS audit selection

Help decide what we benchmark next.

Choose the OSS frameworks and industry peer groups you want CodeWeTrust to scan next. Results remain internal.

Select OSS for Audit

What Each Metric Means — and Why It Matters

Every metric in the benchmark, read as a business consequence rather than a code statistic. The figure beside each one is its average across the whole sampled corpus.

Code Quality

8 metrics

Tech Debt %

72.4%

Expresses accumulated remediation effort as a percentage of what the codebase cost to build — the interest rate on your software asset. Above ~10%, cleanup begins to crowd out feature delivery: every new feature carries a surcharge of workaround and re-testing. In transactions, this percentage is converted directly into remediation cost that reduces valuation or funds escrow.

Defects/10K LOC

32.3

Normalized defect density is the strongest predictor of maintenance cost. Every defect that survives into production consumes capacity budgeted for roadmap work, and defects compound — each unfixed bug raises the cost of every future change touching the same code. High density means delivery slows progressively even with flat headcount.

Blocker Smells/10K

34.4

Blocker-severity smells are the structural problems most likely to cause outright failures — resource leaks, broken error handling, concurrency hazards. Unlike minor smells, these aren't stylistic: they translate into production incidents, emergency patches, and unplanned downtime. Each one is a scheduled outage waiting for a date.

Duplication %

6.2%

Every fix and change must be made in multiple places — and in practice isn't. One copy gets patched, the others drift, and the same bug resurfaces repeatedly at fresh investigation cost. Duplication inflates testing effort and makes security patching unreliable: a vulnerability fixed in one copy stays live in the clones.

Dup Blocks/10K

621.4

Counts the discrete duplicated regions, which is what determines maintenance burden: each block is a separate location an engineer must find, understand, and synchronize on every change. A high block count means the effective size of the codebase — and the cost of every modification — is far larger than the line count suggests.

Hardcoded/10K

7.9

Hardcoded values — credentials, endpoints, magic numbers — create two exposures at once. Hardcoded secrets are a direct security and compliance liability (audit findings under SOC 2, ISO 27001, PCI). Hardcoded configuration makes every environment change a code change, slowing deployment and multiplying release risk.

Long Methods (total)

38.3

Long methods bundle multiple responsibilities into one unit, so every change requires understanding everything the method does. They defeat targeted testing, concentrate defects, and make estimates unreliable — the modules where features are chronically late are almost always the ones built on long methods.

Long Classes (total)

129

Oversized classes are where architecture has collapsed into a “god object” — a single component too central to change safely and too large to understand fully. They create key-person dependency (only one engineer dares touch them), block parallel development, and turn routine changes into multi-week efforts with regression risk.

Security

6 metrics

Vuln/10K LOC

2.3

A known vulnerability is quantifiable liability: exploitable exposure with a CVE attached, treated as such by regulators, insurers, and acquirers. Beyond breach cost, open vulnerabilities trigger findings in SOC 2, DORA, and NIS2 audits, block enterprise sales requiring security attestation, and surface as price-chipping items in due diligence.

Critical Vulns (total)

43.4

Critical-severity vulnerabilities are the subset with known, practical exploit paths — remote code execution, authentication bypass, data exposure. These are not risk-weighted items to schedule; they are standing incidents. A nonzero count is a strong risk indicator: regulated frameworks and security reviews will expect each one to be explained or remediated, depending on exploitability and context.

Hotspots/10K LOC

2.9

Hotspots are security-sensitive code no one has reviewed — the unaudited portion of your attack surface. They represent unquantified risk: you don't know whether they're exploitable, which is exactly what makes them expensive in audits and DD, where unreviewed sensitive code must be treated as unsafe until proven otherwise.

Critical Hotspots (total)

115.9

The highest-priority unreviewed code: encryption, authentication, input handling. Each one is a place where the system's actual security posture is unknown at precisely the point where failure is most damaging. A high count means the organization cannot truthfully answer “are you secure?” — to a customer, an auditor, or an acquirer.

Vulnerable Packages

32.2

Third-party packages with known CVEs put your product's security in someone else's changelog. You inherit every exploit published against them, and attackers scan for exactly these — a leading cause of software supply chain breaches is known, unpatched dependency vulnerabilities. Regulators (NIS2, DORA) now hold you accountable for dependency hygiene, not just your own code.

High-Risk Licenses

22.7

Restrictive licenses (GPL, AGPL, unclear provenance) create legal exposure independent of code quality: copyleft obligations can force disclosure of proprietary source, with injunction and damages risk. In M&A, license findings routinely trigger indemnification demands, escrow holdbacks, or remediation conditions before closing. One AGPL dependency can undermine a SaaS licensing model.

Package Dependencies

4 metrics

Outdated Packages %

33.3%

Every outdated package is deferred work with a rising price: the further behind you fall, the more breaking changes accumulate between you and the current version, until upgrades become migration projects. Outdated dependencies also lose security patch coverage — you're running code whose known flaws are being fixed in versions you don't have.

Critically Outdated Packages

37.6

Packages multiple major versions behind or past end-of-life. These no longer receive security patches at all, meaning every future CVE against them is permanent exposure. They also pin your platform: frameworks, runtimes, and tooling that can't move until these do. Each one is a forced, unbudgeted migration project with a deadline set by someone else.

Multi-versioned Packages

16.2

The same package present in multiple versions signals uncontrolled dependency management. It inflates the attack surface (every version's vulnerabilities apply), causes subtle inconsistencies where different modules behave differently, and reveals that no one governs the dependency tree — a process failure auditors and acquirers read as a proxy for wider engineering discipline.

Unknown License Count

35.6

Code whose license cannot be determined is legally unusable in the strict sense: you cannot prove the right to ship it. In due diligence, unknown-license files are treated as worst-case (copyleft or proprietary) until cleared — making them a closing condition, an indemnity demand, or a remediation project on the buyer's timeline rather than yours.

Development Health

3 metrics

Active Devs (past year)

86.3

The number of people who currently understand the codebase well enough to change it. A low count relative to system size means knowledge concentration: key-person risk, review bottlenecks, and hostage-to-attrition delivery. Buyers and boards read this as the real capacity of the asset — code without people who know it depreciates fast.

Still Active % (all-devs)

55.7%

The share of everyone who ever wrote the code who is still present. A low percentage means most of the codebase was written by people who have left — the reasoning behind design decisions is gone, and every change in their code starts with archaeology. This is the metric behind “nobody knows why it works, so nobody touches it.”

Commits 12 Months

1031.4

Commit volume is a signal of whether the system is actively maintained. Dormant repositories often have stale tooling and few reviewers, and the first change after a long silence tends to be expensive and risky. Low commit counts on business-critical systems are a risk indicator to review in context: a stable, finished component may simply need few changes.

Codebase Composition

4 metrics

Project-Authored Code %

88.2%

The share of the codebase written by the project itself rather than taken from third parties. It describes code composition, not legal ownership. A low share means the “product” is largely assembled from third-party components anyone can replicate, which can compress valuation multiples. A very high share can also flag reinvention of commodity functionality — context determines which reading applies.

Third-Party Code %

11.3%

Code you ship but don't control: its quality, security, and roadmap are set elsewhere. A high share means your risk profile is dominated by external maintainers — every audit, compliance attestation, and security claim you make depends on components you can only monitor, not fix. It shifts engineering effort from building to integrating and upgrading.

Auto-Generated Code %

0.5%

Generated code (from schemas, protocols, scaffolding) shouldn't be hand-maintained — but often is. Manual edits to generated files are destroyed on regeneration, causing recurring, mystifying defects. A misclassified or unmanaged generated share also distorts every other per-line metric, inflating apparent codebase size and diluting density-based scores.

Comment Lines %

14.6%

Comment density proxies for how transferable the code is: whether intent survives the departure of its author. Very low density means onboarding and maintenance depend entirely on reading implementation — slow and error-prone. Very high density often flags the opposite problem: code too convoluted to be understood without narration, or comment rot that misleads rather than explains.

See Where Your Code Ranks

Upload your project's benchmark JSON and compare it against the same industry peer groups.

We simplify end-to-end software evaluation, mitigate risks, and reduce maintenance costs.

Office

Helpline: support@codewetrust.comContact: info@codewetrust.com1209 S Main Street - Suite 319Lindale, TX 75771, USA

© 2026 CodeWeTrust.ai — All rights reserved

codewetrust.com ↗