Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,547
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
google/wire
Compile-time Dependency Injection for Go
Apache-2.0Aug 27, 2026 · metrics 2.10.0
RubyGems · npm
gollum/gollum
A simple, Git-powered wiki with a local frontend and support for many kinds of markup and content.
MITAug 27, 2026 · metrics 2.10.0
Packagist · npm
yiisoft/yii2
Yii 2: The Fast, Secure and Professional PHP Framework
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
spotify/annoy
Approximate Nearest Neighbors in C++/Python optimized for memory usage and loading/saving to disk
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
deeplearning4j/deeplearning4j
Suite of tools for deploying and training deep learning models using the JVM. Highlights include model import for keras, tensorflow, and onnx/pytorch, a modular and tiny c++ library for running math code and a java based math library on top of the core c++ library. Also includes samediff: a pytorch/tensorflow like library for running deep learn...
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
robfig/cron
a cron library for go
MITAug 27, 2026 · metrics 2.10.0
npm
http-party/node-http-proxy
A full-featured http proxy for node.js
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
sivel/speedtest-cli
Command line interface for testing internet bandwidth using speedtest.net
Apache-2.0Aug 12, 2026 · metrics 2.10.0
PyPI
google/yapf
A formatter for Python files
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
sqshq/piggymetrics
Microservice Architecture with Spring Boot, Spring Cloud and Docker
MITAug 27, 2026 · metrics 2.10.0
Go
json-iterator/go
A high-performance 100% compatible drop-in replacement of "encoding/json"
MITAug 27, 2026 · metrics 2.10.0
npm
rabbitmq/rabbitmq-server
Open source RabbitMQ: core server and tier 1 (built-in) plugins
Custom licenseAug 27, 2026 · metrics 2.10.0
Maven
seaswalker/spring-analysis
Spring源码阅读
No licenseAug 27, 2026 · metrics 2.10.0
PyPI
microsoft/LoRA
Code for loralib, an implementation of "LoRA: Low-Rank Adaptation of Large Language Models"
MITAug 12, 2026 · metrics 2.10.0
npm
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
MITAug 4, 2026 · metrics 2.10.0
Maven
macrozheng/mall-learning
mall学习教程，架构、业务、技术要点全方位解析。mall项目（60k+star）是一套电商系统，使用现阶段主流技术实现。涵盖了SpringBoot、MyBatis、Elasticsearch、RabbitMQ、Redis、MongoDB、MySQL等技术，采用Docker容器化部署。
No licenseAug 27, 2026 · metrics 2.10.0
npm
mishoo/UglifyJS
JavaScript parser / mangler / compressor / beautifier toolkit
Custom licenseAug 4, 2026 · metrics 2.10.0
Go
golang/groupcache
groupcache is a caching and cache-filling library, intended as a replacement for memcached in many cases.
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
pytube/pytube
Lightweight, dependency-free Python library and CLI for downloading YouTube videos, playlists, and captions.
UnlicenseAug 27, 2026 · metrics 2.10.0
npm
TypeStrong/ts-node
TypeScript execution and REPL for node.js
MITAug 12, 2026 · metrics 2.10.0
Maven
alibaba/COLA
🥤 COLA: Clean Object-oriented & Layered Architecture
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
npm
dip/cmdk
Fast, unstyled command menu React component.
MITAug 12, 2026 · metrics 2.10.0
PyPI
ultrafunkamsterdam/undetected-chromedriver
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
GPL-3.0Aug 12, 2026 · metrics 2.10.0
—
dotnet/coreclr
CoreCLR is the runtime for .NET Core. It includes the garbage collector, JIT compiler, primitive data types and low-level classes.
No licenseAug 27, 2026 · metrics 2.10.0
PyPI
asweigart/pyautogui
A cross-platform GUI automation Python module for human beings. Used to programmatically control the mouse & keyboard.
BSD-3-ClauseAug 8, 2026 · metrics 2.10.0
npm · Packagist · RubyGems
twbs/bootstrap-sass
Official Sass port of Bootstrap 2 and 3.
MITAug 27, 2026 · metrics 2.10.0
Go · PyPI
redpanda-data/redpanda
Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!
Custom licenseAug 27, 2026 · metrics 2.10.0
Go
infracost/infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven · npm
provectus/kafka-ui
Open-Source Web UI for Apache Kafka Management
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
dbader/schedule
Python job scheduling for humans.
MITAug 27, 2026 · metrics 2.10.0