Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,460
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
npm · RubyGems
thoughtbot/bourbon
A Lightweight Sass Tool Set
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
MITAug 28, 2026 · metrics 2.10.0
PyPI
eternnoir/pyTelegramBotAPI
Python Telegram bot api.
GPL-2.0Aug 12, 2026 · metrics 2.10.0
NuGet
SixLabors/ImageSharp
A modern, cross-platform, 2D Graphics library for .NET
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
jazzband/pip-tools
A set of tools to keep your pinned Python dependencies fresh.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/lang
List of 128 languages for Laravel Framework, Laravel Jetstream, Laravel Fortify, Laravel Breeze, Laravel Cashier, Laravel Nova and Laravel UI.
MITAug 28, 2026 · metrics 2.10.0
Go
evrone/go-clean-template
Clean Architecture template for Golang services
MITAug 28, 2026 · metrics 2.10.0
npm
nanostores/nanostores
A tiny (340 bytes) state manager for React/RN/Preact/Vue/Svelte with many atomic tree-shakable stores
MITAug 27, 2026 · metrics 2.10.0
RubyGems
github-changelog-generator/github-changelog-generator
Automatically generate change log from your tags, issues, labels and pull requests on GitHub.
MITAug 28, 2026 · metrics 2.10.0
Maven · npm
wiremock/wiremock
A tool for mocking HTTP services
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
dbgate/dbgate
Database manager for MySQL, PostgreSQL, SQL Server, MongoDB, SQLite and others. Runs under Windows, Linux, Mac or as web application
GPL-3.0Aug 28, 2026 · metrics 2.10.0
RubyGems
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
stefanpenner/es6-promise
A polyfill for ES6-style Promises
MITAug 12, 2026 · metrics 2.10.0
npm
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
MITSep 6, 2026 · metrics 2.10.0
Maven
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
GPL-3.0Aug 4, 2026 · metrics 2.10.0
npm · Packagist
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
Custom licenseAug 18, 2026 · metrics 2.10.0
PyPI
subzeroid/instagrapi
🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
mesonbuild/meson
The Meson Build System
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
espressif/esptool
Serial utility for flashing, provisioning, and interacting with Espressif SoCs
GPL-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems · npm
hanami/hanami
A flexible framework for maintainable Ruby apps
MITAug 28, 2026 · metrics 2.10.0
npm
svaarala/duktape
Duktape - embeddable Javascript engine with a focus on portability and compact footprint
MITAug 28, 2026 · metrics 2.10.0
npm · RubyGems
redmine/redmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
MITAug 28, 2026 · metrics 2.10.0
npm
piotrwitek/utility-types
Collection of utility types, complementing TypeScript built-in mapped types and aliases (think "lodash" for static types).
MITAug 12, 2026 · metrics 2.10.0
Go
disintegration/imaging
Imaging is a simple image processing package for Go
MITAug 28, 2026 · metrics 2.10.0
RubyGems
dependabot/dependabot-core
🤖 Dependabot's core logic for creating update PRs.
MITAug 28, 2026 · metrics 2.10.0
NuGet · PyPI
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
MITAug 28, 2026 · metrics 2.10.0
PyPI · RubyGems
google/clusterfuzz
Scalable fuzzing infrastructure.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
kangax/html-minifier
Javascript-based HTML compressor/minifier (with Node.js support)
MITAug 12, 2026 · metrics 2.10.0