Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,490
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
MITAug 5, 2026 · metrics 2.10.0
npm
less/less.js
Less. The dynamic stylesheet language.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
janl/mustache.js
Minimal templating with {{mustaches}} in JavaScript
MITAug 12, 2026 · metrics 2.10.0
crates.io
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
piskvorky/gensim
Topic Modelling for Humans
LGPL-2.1Aug 5, 2026 · metrics 2.10.0
PyPI · npm
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
MITAug 5, 2026 · metrics 2.10.0
PyPI
treeverse/dvc
🦉 Data Versioning and ML Experiments
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
PyPI · npm · Go +2
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
sindresorhus/got
🌐 Human-friendly and powerful HTTP request library for Node.js
MITAug 12, 2026 · metrics 2.10.0
PyPI
sympy/sympy
A computer algebra system written in pure Python
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
nltk/nltk
NLTK Source
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Packagist · npm
yiisoft/yii2
Yii 2: The Fast, Secure and Professional PHP Framework
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
rabbitmq/rabbitmq-server
Open source RabbitMQ: core server and tier 1 (built-in) plugins
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
MITAug 4, 2026 · metrics 2.10.0
Go · PyPI
redpanda-data/redpanda
Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!
Custom licenseAug 27, 2026 · metrics 2.10.0
Go
infracost/infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven · npm
provectus/kafka-ui
Open-Source Web UI for Apache Kafka Management
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
seanmonstar/reqwest
An easy and powerful Rust HTTP Client
Apache-2.0Aug 3, 2026 · metrics 2.10.0
Go
FerretDB/FerretDB
A truly Open Source MongoDB alternative
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
MPL-2.0Aug 28, 2026 · metrics 2.10.0
crates.io
serde-rs/serde
Serialization framework for Rust
Apache-2.0Aug 20, 2026 · metrics 2.10.0
PyPI
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
Apache-2.0Aug 12, 2026 · metrics 2.10.0
NuGet
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
unovue/shadcn-vue
Vue port of shadcn-ui
MITAug 28, 2026 · metrics 2.10.0
PyPI
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Apache-2.0Aug 8, 2026 · metrics 2.10.0
PyPI
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
thoughtbot/bourbon
A Lightweight Sass Tool Set
MITAug 28, 2026 · metrics 2.10.0