CodeRiskTools Popularity Cohort — 2026-W30
This is a popularity cohort and scan-coverage index, not a security ranking.
- #1 codecrafters-io/build-your-own-x — 529747 stars — scan complete — observations critical=0, high=0, medium=0, low=0
- #2 sindresorhus/awesome — 487278 stars — scan complete — observations critical=0, high=0, medium=0, low=0
- #3 freeCodeCamp/freeCodeCamp — 452285 stars — scan partial — observations critical=18, high=220, medium=111, low=0
- #4 public-apis/public-apis — 451760 stars — scan complete — observations critical=0, high=0, medium=6, low=0
- #5 EbookFoundation/free-programming-books — 392624 stars — scan complete — observations critical=3, high=0, medium=22, low=0
- #6 nilbuild/developer-roadmap — 362058 stars — scan complete — observations critical=12, high=22, medium=28, low=0
- #7 996icu/996.ICU — 276450 stars — scan complete — observations critical=0, high=0, medium=0, low=2
- #8 react/react — 246624 stars — scan complete — observations critical=0, high=15, medium=84, low=2
- #9 torvalds/linux — 240021 stars — scan complete — observations critical=2, high=1816, medium=1109, low=10
- #10 ossu/computer-science — 207022 stars — scan complete — observations critical=0, high=0, medium=2, low=0
- #11 tensorflow/tensorflow — 196436 stars — scan complete — observations critical=6, high=1064, medium=291, low=0
- #12 microsoft/vscode — 187770 stars — scan complete — observations critical=32, high=1457, medium=5033, low=18
- #13 kubernetes/kubernetes — 123844 stars — scan complete — observations critical=135, high=1699, medium=868, low=7
- #14 nodejs/node — 118338 stars — scan complete — observations critical=150, high=8364, medium=1416, low=60
- #15 pallets/flask — 71988 stars — scan complete — observations critical=8, high=7, medium=12, low=0
Limitations
- This is a popularity cohort and scan-coverage index, not a security ranking.
- Partial or failed scans are not interpreted as clean or vulnerable.
- Raw findings, paths, snippets, secrets, scores, grades, and firewall results are not published.
- Severity counts are rule observations in the tested scope, not confirmed vulnerabilities or a security ranking.