Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,460
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
godotengine/godot
Godot Engine – Multi-platform 2D and 3D game engine
MITAug 4, 2026 · metrics 2.10.0
npm · crates.io
oven-sh/bun
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
facebook/docusaurus
Easy to maintain open source documentation websites.
MITAug 4, 2026 · metrics 2.10.0
PyPI
scrapy/scrapy
Scrapy, a fast high-level web crawling & scraping framework for Python.
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
npm
lodash/lodash
A modern JavaScript utility library delivering modularity, performance, & extras.
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
TryGhost/Ghost
Independent technology for modern publishing, memberships, subscriptions and newsletters.
MITAug 4, 2026 · metrics 2.10.0
Maven
JetBrains/kotlin
The Kotlin Programming Language.
Custom licenseAug 4, 2026 · metrics 2.10.0
npm · crates.io · PyPI
janhq/jan
Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.
Custom licenseSep 6, 2026 · metrics 2.10.0
Go · npm
MHSanaei/3x-ui
Xray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto)
GPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
nolimits4web/swiper
Most modern mobile touch slider with hardware accelerated transitions
MITAug 5, 2026 · metrics 2.10.0
npm
yarnpkg/yarn
The 1.x line is frozen - features and bugfixes now happen on https://github.com/yarnpkg/berry
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems · crates.io · npm +1
SeleniumHQ/selenium
A browser automation framework and ecosystem.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
postcss/postcss
Transforming styles with JS plugins
MITAug 4, 2026 · metrics 2.10.0
npm
mobxjs/mobx
Simple, scalable state management.
MITAug 5, 2026 · metrics 2.10.0
PyPI · npm
mlflow/mlflow
The open source AI engineering platform for agents, LLMs, and ML models. MLflow enables teams of all sizes to debug, evaluate, monitor, and optimize production-quality AI applications while controlling costs and managing access to models and data.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
ai/nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
MITAug 4, 2026 · metrics 2.10.0
Maven · npm
jenkinsci/jenkins
Jenkins automation server
MITAug 5, 2026 · metrics 2.10.0
npm · Packagist · Maven +2
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
npm · PyPI
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
PyPI
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
MITAug 5, 2026 · metrics 2.10.0
Go
micro/go-micro
A Go agent harness and service framework
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm · RubyGems
forem/forem
For empowering community 🌱
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
MITAug 4, 2026 · metrics 2.10.0
npm
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
MITAug 4, 2026 · metrics 2.10.0
Maven · npm
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
eligrey/FileSaver.js
An HTML5 saveAs() FileSaver implementation
Custom licenseAug 12, 2026 · metrics 2.10.0
Maven · npm · RubyGems
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
MITAug 5, 2026 · metrics 2.10.0
npm
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Custom licenseAug 5, 2026 · metrics 2.10.0