Geography & origin
The center of gravity is shifting east
The US share of new contributors fell from 25.7% in 2018 to 18.8% in 2024, while China rose from 10.6% to 16.6% and India from 4.5% to 7.3%.
Read findingEvidence library
Research findings
Published evidence on the people, ecosystems, identities, and vulnerabilities that shape the open-source software supply chain.
Based on the Exodos Labs provenance dataset.
Featured public findings
6 findings shown
Concentration & risk
Open source runs on a population smaller than a small town
The top 1% of human contributors — roughly 7,800 people — produce 60.9% of all commits.
Read findingConcentration & risk
Even the most popular projects rest on one person
76.6% of all packages are maintained by a single person.
Read findingEcosystem personality
Bots went from rounding error to one in ten commits
Bot-authored commits rose from 0.1% in 2015 to 9.8% in 2025.
Read findingIdentity & privacy
And it's accelerating
The share of new contributors using GitHub's anonymous email climbed from 2.9% in 2014 to 39.6% in 2024.
Read findingHygiene & licensing
Dormant packages aren't just stale, they're insecure
Repositories with no release in two years average 2.6/10 on the Scorecard, against 4.5 for active ones.
Read finding