Web Application Security Working Group

In a Nutshell, Web Application Security Working Group...

• ...
  has had 2,315 commits made by 89 contributors
  representing 76,708 lines of code
• ...
  is mostly written in JavaScript
  with a very well-commented source code
• ...
  has a well established, mature codebase
  maintained by a average size development team
  with stable Y-O-Y commits
• ...
  took an estimated 20 years of effort (COCOMO model)
  starting with its first commit in March, 2011
  ending with its most recent commit 4 months ago