Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,113
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · PyPI
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
—
simdjson/simdjson
Parsing gigabytes of JSON per second : used by Facebook/Meta Velox, the Node.js runtime, ClickHouse, WatermelonDB, Apache Doris, Milvus, StarRocks
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Maven
EnterpriseQualityCoding/FizzBuzzEnterpriseEdition
FizzBuzz Enterprise Edition is a no-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes.
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
vanna-ai/vanna
🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.
MITSep 17, 2026 · metrics 2.10.0
npm
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
MITSep 16, 2026 · metrics 2.10.0
npm
jquense/yup
Dead simple Object schema validation
MITSep 17, 2026 · metrics 2.10.0
PyPI
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
jaredhanson/passport
Simple, unobtrusive authentication for Node.js.
MITSep 17, 2026 · metrics 2.10.0
crates.io · npm
rome/tools
Unified developer tools for JavaScript, TypeScript, and the web
MITSep 18, 2026 · metrics 2.10.0
PyPI
mementum/backtrader
Python Backtesting library for trading strategies
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Go
micro/go-micro
A Go agent harness and service framework
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · RubyGems
forem/forem
For empowering community 🌱
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
MITSep 16, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs
Project documentation with Markdown.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
Maven · npm
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
MITSep 16, 2026 · metrics 2.10.0
Maven · npm · RubyGems
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
MITSep 16, 2026 · metrics 2.10.0
npm
eligrey/FileSaver.js
An HTML5 saveAs() FileSaver implementation
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
gorilla/mux
Package gorilla/mux is a powerful HTTP router and URL matcher for building Go web servers with 🦍
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
react-dnd/react-dnd
Drag and Drop for React
MITSep 17, 2026 · metrics 2.10.0
npm
AutomaApp/automa
A browser extension for automating your browser by connecting blocks
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI · npm
RasaHQ/rasa
💬 Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
rough-stuff/rough
Create graphics with a hand-drawn, sketchy, appearance
MITSep 17, 2026 · metrics 2.10.0
npm
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
apache/mxnet
Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · RubyGems
petkaantonov/bluebird
:bird: :zap: Bluebird is a full featured promise library with unmatched performance.
MITSep 17, 2026 · metrics 2.10.0
Maven · npm
linlinjava/litemall
又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端
MITSep 16, 2026 · metrics 2.10.0
Maven
yudaocode/SpringBoot-Labs
一个涵盖六个专栏：Spring Boot 2.X、Spring Cloud、Spring Cloud Alibaba、Dubbo、分布式消息队列、分布式事务的仓库。希望胖友小手一抖，右上角来个 Star，感恩 1024
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
lss233/kirara-ai
🤖 可 DIY 的 多模态 AI 聊天机器人 | 🚀 快速接入 微信、 QQ、Telegram、等聊天平台 | 🦈支持DeepSeek、Grok、Claude、Ollama、Gemini、OpenAI | 工作流系统、网页搜索、AI画图、人设调教、虚拟女仆、语音对话 |
AGPL-3.0Sep 19, 2026 · metrics 2.10.0