Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,077
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
niklasvh/html2canvas
Screenshots with JavaScript
MITSep 17, 2026 · metrics 2.10.0
Go
spf13/viper
Go configuration with fangs
MITSep 16, 2026 · metrics 2.10.0
PyPI
JaidedAI/EasyOCR
Ready-to-use OCR with 80+ supported languages and all popular writing scripts including Latin, Chinese, Arabic, Devanagari, Cyrillic and etc.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
JushBJJ/Mr.-Ranedeer-AI-Tutor
A GPT-4 AI Tutor Prompt for customizable personalized learning experiences.
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
google/python-fire
Python Fire is a library for automatically generating command line interfaces (CLIs) from absolutely any Python object.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
mobxjs/mobx
Simple, scalable state management.
MITSep 16, 2026 · metrics 2.10.0
Go
go-kit/kit
A standard library for microservices.
MITSep 15, 2026 · metrics 2.10.0
npm
codemirror/codemirror5
In-browser code editor (version 5, legacy)
MITSep 17, 2026 · metrics 2.10.0
Maven
crossoverJie/JCSprout
👨🎓 Java Core Sprout : basic, concurrent, algorithm
MITSep 16, 2026 · metrics 2.10.0
Packagist
fzaninotto/Faker
Faker is a PHP library that generates fake data for you
MITSep 18, 2026 · metrics 2.10.0
Maven
qiurunze123/miaosha
⭐⭐⭐⭐秒杀系统设计与实现.互联网工程师进阶与分析🙋🐓
No licenseSep 16, 2026 · metrics 2.10.0
PyPI · npm
facebookresearch/fastText
Library for fast text representation and classification.
MITSep 17, 2026 · metrics 2.10.0
npm
rstacruz/nprogress
For slim progress bars like on YouTube, Medium, etc
MITSep 17, 2026 · metrics 2.10.0
npm · Go
microsoft/typescript-go
Staging repo for development of native port of TypeScript
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
JakeChampion/fetch
A window.fetch JavaScript polyfill.
MITSep 17, 2026 · metrics 2.10.0
npm
localForage/localForage
💾 Offline storage, improved. Wraps IndexedDB, WebSQL, or localStorage using a simple but powerful API.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
request/request
🏊🏾 Simplified HTTP request client.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
—
simdjson/simdjson
Parsing gigabytes of JSON per second : used by Facebook/Meta Velox, the Node.js runtime, ClickHouse, WatermelonDB, Apache Doris, Milvus, StarRocks
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Maven
EnterpriseQualityCoding/FizzBuzzEnterpriseEdition
FizzBuzz Enterprise Edition is a no-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes.
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
vanna-ai/vanna
🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.
MITSep 17, 2026 · metrics 2.10.0
npm
jquense/yup
Dead simple Object schema validation
MITSep 17, 2026 · metrics 2.10.0
npm
jaredhanson/passport
Simple, unobtrusive authentication for Node.js.
MITSep 17, 2026 · metrics 2.10.0
crates.io · npm
rome/tools
Unified developer tools for JavaScript, TypeScript, and the web
MITSep 18, 2026 · metrics 2.10.0
PyPI
mementum/backtrader
Python Backtesting library for trading strategies
GPL-3.0Sep 17, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs
Project documentation with Markdown.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
Maven · npm
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
eligrey/FileSaver.js
An HTML5 saveAs() FileSaver implementation
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
gorilla/mux
Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
react-dnd/react-dnd
Drag and Drop for React
MITSep 17, 2026 · metrics 2.10.0