Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,393
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · Packagist
foundation/foundation-sites
The most advanced responsive front-end framework in the world. Quickly create prototypes and production code for sites that work on any kind of device.
MITAug 5, 2026 · metrics 2.10.0
npm
caolan/async
Async utilities for node and the browser
MITAug 4, 2026 · metrics 2.10.0
npm
codemirror/codemirror5
In-browser code editor (version 5, legacy)
MITAug 12, 2026 · metrics 2.10.0
Maven
crossoverJie/JCSprout
👨🎓 Java Core Sprout : basic, concurrent, algorithm
MITAug 5, 2026 · metrics 2.10.0
Packagist
fzaninotto/Faker
Faker is a PHP library that generates fake data for you
MITAug 13, 2026 · metrics 2.10.0
Maven
qiurunze123/miaosha
⭐⭐⭐⭐秒杀系统设计与实现.互联网工程师进阶与分析🙋🐓
No licenseAug 5, 2026 · metrics 2.10.0
PyPI · npm
facebookresearch/fastText
Library for fast text representation and classification.
MITAug 12, 2026 · metrics 2.10.0
npm
rstacruz/nprogress
For slim progress bars like on YouTube, Medium, etc
MITAug 12, 2026 · metrics 2.10.0
npm
JakeChampion/fetch
A window.fetch JavaScript polyfill.
MITAug 12, 2026 · metrics 2.10.0
npm
localForage/localForage
💾 Offline storage, improved. Wraps IndexedDB, WebSQL, or localStorage using a simple but powerful API.
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Maven
alibaba/fastjson
FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.
Apache-2.0Aug 26, 2026 · metrics 2.10.0
npm
request/request
🏊🏾 Simplified HTTP request client.
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Go
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
PyPI
vanna-ai/vanna
🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.
MITAug 12, 2026 · metrics 2.10.0
Maven
EnterpriseQualityCoding/FizzBuzzEnterpriseEdition
FizzBuzz Enterprise Edition is a no-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes.
No licenseAug 5, 2026 · metrics 2.10.0
npm
jquense/yup
Dead simple Object schema validation
MITAug 12, 2026 · metrics 2.10.0
npm
jaredhanson/passport
Simple, unobtrusive authentication for Node.js.
MITAug 12, 2026 · metrics 2.10.0
crates.io · npm
rome/tools
Unified developer tools for JavaScript, TypeScript, and the web
MITAug 14, 2026 · metrics 2.10.0
PyPI
mementum/backtrader
Python Backtesting library for trading strategies
GPL-3.0Aug 12, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs
Project documentation with Markdown.
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
npm
eligrey/FileSaver.js
An HTML5 saveAs() FileSaver implementation
Custom licenseAug 12, 2026 · metrics 2.10.0
Go
gorilla/mux
Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
npm
react-dnd/react-dnd
Drag and Drop for React
MITAug 12, 2026 · metrics 2.10.0
PyPI · npm
RasaHQ/rasa
💬 Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
rough-stuff/rough
Create graphics with a hand-drawn, sketchy, appearance
MITAug 12, 2026 · metrics 2.10.0
PyPI
apache/mxnet
Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm · RubyGems
petkaantonov/bluebird
:bird: :zap: Bluebird is a full featured promise library with unmatched performance.
MITAug 12, 2026 · metrics 2.10.0
Maven · npm
linlinjava/litemall
又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端
MITAug 5, 2026 · metrics 2.10.0
Maven
yudaocode/SpringBoot-Labs
一个涵盖六个专栏：Spring Boot 2.X、Spring Cloud、Spring Cloud Alibaba、Dubbo、分布式消息队列、分布式事务的仓库。希望胖友小手一抖，右上角来个 Star，感恩 1024
No licenseAug 5, 2026 · metrics 2.10.0
Maven
antlr/antlr4
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0