Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,268
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm
tweenjs/tween.js
JavaScript/TypeScript animation engine
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven
stanfordnlp/CoreNLP
CoreNLP: A Java suite of core NLP tools for tokenization, sentence segmentation, NER, parsing, coreference, sentiment analysis, etc.
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
golang/protobuf
Go support for Google's protocol buffers
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
php-fig/container
No repository description published.
MITAug 27, 2026 · metrics 2.10.0
npm · PyPI
microsoft/vscode-copilot-chat
Copilot Chat extension for VS Code
MITAug 28, 2026 · metrics 2.10.0
Maven
xuchengsheng/spring-reading
涵盖了 Spring 框架的核心概念和关键功能，包括控制反转（IOC）容器的使用，面向切面编程（AOP）的原理与实践，事务管理的方式与实现，Spring MVC 的流程与控制器工作机制，以及 Spring 中数据访问、安全、Boot 自动配置等方面的深入研究。此外，它还包含了 Spring 事件机制的应用、高级主题如缓存抽象和响应式编程，以及对 Spring 源码的编程风格与设计模式的深入探讨。
MITAug 28, 2026 · metrics 2.10.0
Maven · PyPI
LaurieWired/GhidraMCP
MCP Server for Ghidra
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
senchalabs/connect
Connect is an extensible HTTP server framework for node using "plugins" known as middleware.
MITSep 17, 2026 · metrics 2.10.0
Maven
paascloud/paascloud-master
spring cloud + vue + oAuth2.0全家桶实战，前后端分离模拟商城，完整的购物流程、后端运营平台，可以实现快速搭建企业级微服务项目。支持微信登录等三方登录。
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
MITSep 16, 2026 · metrics 2.10.0
NuGet
bchavez/Bogus
:card_index: A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
lihengming/spring-boot-api-project-seed
:seedling::rocket:一个基于Spring Boot & MyBatis的种子项目，用于快速构建中小型API、RESTful API项目~
No licenseAug 28, 2026 · metrics 2.10.0
Maven
perwendel/spark
A simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
pmndrs/use-gesture
👇Bread n butter utility for component-tied mouse/touch gestures in React and Vanilla Javascript.
MITSep 17, 2026 · metrics 2.10.0
PyPI
Oneflow-Inc/oneflow
OneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
swiftmailer/swiftmailer
Comprehensive mailing tools for PHP
MITSep 18, 2026 · metrics 2.10.0
Go
golang/mock
GoMock is a mocking framework for the Go programming language.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
MITSep 16, 2026 · metrics 2.10.0
—
chakra-core/ChakraCore
ChakraCore is an open source Javascript engine with a C API.
MITAug 28, 2026 · metrics 2.10.0
PyPI
seatgeek/fuzzywuzzy
Fuzzy String Matching in Python
GPL-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
imathis/octopress
Octopress is an obsessively designed framework for Jekyll blogging. It’s easy to configure and easy to deploy. Sweet huh?
No licenseAug 28, 2026 · metrics 2.10.0
npm
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
MITSep 17, 2026 · metrics 2.10.0
npm
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
MITSep 17, 2026 · metrics 2.10.0
Packagist
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
MITSep 18, 2026 · metrics 2.10.0
npm
mrdoob/stats.js
JavaScript Performance Monitor
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
thoughtbot/bourbon
A Lightweight Sass Tool Set
MITAug 28, 2026 · metrics 2.10.0
npm
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
No licenseAug 28, 2026 · metrics 2.10.0
npm
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
MITSep 17, 2026 · metrics 2.10.0
PyPI
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Apache-2.0Sep 17, 2026 · metrics 2.10.0