The state of the corpus
Every codebase measured against the Code Assurance Index, read together on 3 October 2026. Each figure below carries the population it was taken over, because the populations are not the same.
By languageEvery language with enough measured codebases to read as a groupBy countryWhere the codebases' owners say they are, with the denominators that make it readableAdvisories seenEvery advisory seen across the corpus — each count a floorVulnerable packagesEvery package seen carrying an advisory — each count a floor
Taken over 6,081 published measured codebases, measured 3 October 2026, 12:42 UTC. Corpus readings are append-only: this one is a citable observation of a single reading and is never edited. Every share on this page states the counts it was derived from, so any of them can be checked against the reading rather than taken on faith.