Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,528
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · PyPI
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
Go
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
PyPI
vanna-ai/vanna
🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.
MITAug 12, 2026 · metrics 2.10.0
Maven
EnterpriseQualityCoding/FizzBuzzEnterpriseEdition
FizzBuzz Enterprise Edition is a no-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes.
No licenseAug 5, 2026 · metrics 2.10.0
npm
jquense/yup
Dead simple Object schema validation
MITAug 12, 2026 · metrics 2.10.0
npm
jaredhanson/passport
Simple, unobtrusive authentication for Node.js.
MITAug 12, 2026 · metrics 2.10.0
PyPI
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
Custom licenseAug 12, 2026 · metrics 2.10.0
crates.io · npm
rome/tools
Unified developer tools for JavaScript, TypeScript, and the web
MITAug 14, 2026 · metrics 2.10.0
npm
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
MITAug 5, 2026 · metrics 2.10.0
Go
micro/go-micro
A Go agent harness and service framework
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
mementum/backtrader
Python Backtesting library for trading strategies
GPL-3.0Aug 12, 2026 · metrics 2.10.0
npm · RubyGems
forem/forem
For empowering community 🌱
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
MITAug 4, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs
Project documentation with Markdown.
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
npm
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
MITAug 4, 2026 · metrics 2.10.0
Maven · npm
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
eligrey/FileSaver.js
An HTML5 saveAs() FileSaver implementation
Custom licenseAug 12, 2026 · metrics 2.10.0
Go
gorilla/mux
Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
npm
react-dnd/react-dnd
Drag and Drop for React
MITAug 12, 2026 · metrics 2.10.0
PyPI · npm
RasaHQ/rasa
💬 Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
rough-stuff/rough
Create graphics with a hand-drawn, sketchy, appearance
MITAug 12, 2026 · metrics 2.10.0
Maven · npm · RubyGems
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
MITAug 5, 2026 · metrics 2.10.0
PyPI
apache/mxnet
Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Custom licenseAug 5, 2026 · metrics 2.10.0
npm · RubyGems
petkaantonov/bluebird
:bird: :zap: Bluebird is a full featured promise library with unmatched performance.
MITAug 12, 2026 · metrics 2.10.0
Maven · npm
linlinjava/litemall
又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端
MITAug 5, 2026 · metrics 2.10.0
Maven
yudaocode/SpringBoot-Labs
一个涵盖六个专栏：Spring Boot 2.X、Spring Cloud、Spring Cloud Alibaba、Dubbo、分布式消息队列、分布式事务的仓库。希望胖友小手一抖，右上角来个 Star，感恩 1024
No licenseAug 5, 2026 · metrics 2.10.0
Maven
antlr/antlr4
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
Maven
dianping/cat
CAT 作为服务端项目基础组件，提供了 Java, C/C++, Node.js, Python, Go 等多语言客户端，已经在美团点评的基础架构中间件框架（MVC框架，RPC框架，数据库框架，缓存框架等，消息队列，配置系统等）深度集成，为美团点评各业务线提供系统丰富的性能指标、健康状况、实时告警等。
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
MITAug 5, 2026 · metrics 2.10.0