Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,347
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Maven · PyPI
LaurieWired/GhidraMCP
MCP Server for Ghidra
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
senchalabs/connect
Connect is an extensible HTTP server framework for node using "plugins" known as middleware.
MITSep 17, 2026 · metrics 2.10.0
Maven
paascloud/paascloud-master
spring cloud + vue + oAuth2.0全家桶实战，前后端分离模拟商城，完整的购物流程、后端运营平台，可以实现快速搭建企业级微服务项目。支持微信登录等三方登录。
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
MITSep 16, 2026 · metrics 2.10.0
NuGet
bchavez/Bogus
:card_index: A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
lihengming/spring-boot-api-project-seed
:seedling::rocket:一个基于Spring Boot & MyBatis的种子项目，用于快速构建中小型API、RESTful API项目~
No licenseAug 28, 2026 · metrics 2.10.0
Maven
perwendel/spark
A simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
pmndrs/use-gesture
👇Bread n butter utility for component-tied mouse/touch gestures in React and Vanilla Javascript.
MITSep 17, 2026 · metrics 2.10.0
PyPI
Oneflow-Inc/oneflow
OneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
swiftmailer/swiftmailer
Comprehensive mailing tools for PHP
MITSep 18, 2026 · metrics 2.10.0
Go
golang/mock
GoMock is a mocking framework for the Go programming language.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
MITSep 16, 2026 · metrics 2.10.0
Maven
JetBrains/Exposed
Kotlin SQL Framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
chakra-core/ChakraCore
ChakraCore is an open source Javascript engine with a C API.
MITAug 28, 2026 · metrics 2.10.0
PyPI
seatgeek/fuzzywuzzy
Fuzzy String Matching in Python
GPL-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
imathis/octopress
Octopress is an obsessively designed framework for Jekyll blogging. It’s easy to configure and easy to deploy. Sweet huh?
No licenseAug 28, 2026 · metrics 2.10.0
npm
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
MITSep 17, 2026 · metrics 2.10.0
npm
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
MITSep 17, 2026 · metrics 2.10.0
Packagist
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
MITSep 18, 2026 · metrics 2.10.0
npm
mrdoob/stats.js
JavaScript Performance Monitor
MITSep 17, 2026 · metrics 2.10.0
Maven
checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
thoughtbot/bourbon
A Lightweight Sass Tool Set
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
MITAug 28, 2026 · metrics 2.10.0
npm
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
No licenseAug 28, 2026 · metrics 2.10.0
npm
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
MITSep 17, 2026 · metrics 2.10.0
PyPI
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
MITAug 28, 2026 · metrics 2.10.0
Go · npm
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
Custom licenseSep 19, 2026 · metrics 2.10.0