Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,335
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
open-mmlab/mmdetection
OpenMMLab Detection Toolbox and Benchmark
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
airbnb/lottie-web
Render After Effects animations natively on Web, Android and iOS, and React Native. http://airbnb.io/lottie/
MITAug 12, 2026 · metrics 2.10.0
npm
niklasvh/html2canvas
Screenshots with JavaScript
MITAug 12, 2026 · metrics 2.10.0
PyPI
JaidedAI/EasyOCR
Ready-to-use OCR with 80+ supported languages and all popular writing scripts including Latin, Chinese, Arabic, Devanagari, Cyrillic and etc.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm · Packagist
foundation/foundation-sites
The most advanced responsive front-end framework in the world. Quickly create prototypes and production code for sites that work on any kind of device.
MITAug 5, 2026 · metrics 2.10.0
npm
mobxjs/mobx
Simple, scalable state management.
MITAug 5, 2026 · metrics 2.10.0
npm
caolan/async
Async utilities for node and the browser
MITAug 4, 2026 · metrics 2.10.0
PyPI · npm
mlflow/mlflow
The open source AI engineering platform for agents, LLMs, and ML models. MLflow enables teams of all sizes to debug, evaluate, monitor, and optimize production-quality AI applications while controlling costs and managing access to models and data.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
codemirror/codemirror5
In-browser code editor (version 5, legacy)
MITAug 12, 2026 · metrics 2.10.0
Maven
crossoverJie/JCSprout
👨🎓 Java Core Sprout : basic, concurrent, algorithm
MITAug 5, 2026 · metrics 2.10.0
Packagist
fzaninotto/Faker
Faker is a PHP library that generates fake data for you
MITAug 13, 2026 · metrics 2.10.0
Maven
qiurunze123/miaosha
⭐⭐⭐⭐秒杀系统设计与实现.互联网工程师进阶与分析🙋🐓
No licenseAug 5, 2026 · metrics 2.10.0
PyPI · npm
facebookresearch/fastText
Library for fast text representation and classification.
MITAug 12, 2026 · metrics 2.10.0
npm
rstacruz/nprogress
For slim progress bars like on YouTube, Medium, etc
MITAug 12, 2026 · metrics 2.10.0
npm
JakeChampion/fetch
A window.fetch JavaScript polyfill.
MITAug 12, 2026 · metrics 2.10.0
npm
localForage/localForage
💾 Offline storage, improved. Wraps IndexedDB, WebSQL, or localStorage using a simple but powerful API.
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Maven
alibaba/fastjson
FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.
Apache-2.0Aug 26, 2026 · metrics 2.10.0
npm
request/request
🏊🏾 Simplified HTTP request client.
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Go
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
PyPI
vanna-ai/vanna
🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.
MITAug 12, 2026 · metrics 2.10.0
Maven
EnterpriseQualityCoding/FizzBuzzEnterpriseEdition
FizzBuzz Enterprise Edition is a no-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes.
No licenseAug 5, 2026 · metrics 2.10.0
npm
jquense/yup
Dead simple Object schema validation
MITAug 12, 2026 · metrics 2.10.0
npm
jaredhanson/passport
Simple, unobtrusive authentication for Node.js.
MITAug 12, 2026 · metrics 2.10.0
crates.io · npm
rome/tools
Unified developer tools for JavaScript, TypeScript, and the web
MITAug 14, 2026 · metrics 2.10.0
PyPI
mementum/backtrader
Python Backtesting library for trading strategies
GPL-3.0Aug 12, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs
Project documentation with Markdown.
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
Maven · npm
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
eligrey/FileSaver.js
An HTML5 saveAs() FileSaver implementation
Custom licenseAug 12, 2026 · metrics 2.10.0
Go
gorilla/mux
Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
npm
react-dnd/react-dnd
Drag and Drop for React
MITAug 12, 2026 · metrics 2.10.0