Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,076
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · npm · PyPI
kenn-io/agentsview
Local-first session search, analytics, insights, and token use statistics for coding agents, supporting Claude Code, Codex, and more than 50 other agents.
MITOct 24, 2026 · metrics 2.10.0
PyPI
fastapi-users/fastapi-users
Ready-to-use and customizable users management for FastAPI
MITOct 24, 2026 · metrics 2.10.0
PyPI
androguard/androguard
Reverse engineering and pentesting for Android applications
Apache-2.0Sep 17, 2026 · metrics 2.10.0
NuGet
naudio/NAudio
Audio and MIDI library for .NET
MITOct 21, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/resource-operations
Provides a list of PHP built-in functions that operate on resources
Custom licenseOct 24, 2026 · metrics 2.10.0
—
kif-framework/KIF
Keep It Functional - An iOS Functional Testing Framework
Custom licenseOct 21, 2026 · metrics 2.10.0
npm · crates.io
loro-dev/loro
Make your JSON data collaborative and version-controlled with CRDTs
MITOct 24, 2026 · metrics 2.10.0
—
Neargye/magic_enum
Static reflection for enums (to string, from string, iteration) for modern C++, work with any enum type without any macro or boilerplate code
MITOct 24, 2026 · metrics 2.10.0
PyPI
RediSearch/RediSearch
A query and indexing engine for Redis, providing secondary indexing, full-text search, vector similarity search and aggregations.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
fontsource/fontsource
Self-host Open Source fonts in neatly bundled NPM packages.
MITOct 24, 2026 · metrics 2.10.0
Maven
auth0/java-jwt
Java implementation of JSON Web Token (JWT)
MITOct 24, 2026 · metrics 2.10.0
npm · crates.io
chakra-ui/panda
🐼 Universal, Type-Safe, CSS-in-JS Framework for Design Systems ⚡️
MITOct 24, 2026 · metrics 2.10.0
npm · Packagist
medialize/URI.js
Javascript URL mutation library
MITSep 17, 2026 · metrics 2.10.0
Maven
graphql-java/graphql-java
GraphQL Java implementation
MITOct 19, 2026 · metrics 2.10.0
RubyGems
norman/friendly_id
FriendlyId is the “Swiss Army bulldozer” of slugging and permalink plugins for ActiveRecord. It allows you to create pretty URL’s and work with human-friendly strings as if they were numeric ids for ActiveRecord models.
MITOct 24, 2026 · metrics 2.10.0
PyPI
containers/podman-compose
a script to run docker-compose.yml using podman
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
svaarala/duktape
Duktape - embeddable Javascript engine with a focus on portability and compact footprint
MITOct 24, 2026 · metrics 2.10.0
npm · crates.io · PyPI
kucherenko/jscpd
Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.
MITSep 15, 2026 · metrics 2.10.0
PyPI
pywinauto/pywinauto
Windows GUI Automation with Python (based on text properties)
BSD-3-ClauseOct 15, 2026 · metrics 2.10.0
Go
lxc/incus
Powerful system container and virtual machine manager
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
Dicklesworthstone/destructive_command_guard
The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist
aws/aws-sdk-php
Official repository of the AWS SDK for PHP (@awsforphp)
Apache-2.0Oct 20, 2026 · metrics 2.10.0
NuGet
StackExchange/StackExchange.Redis
The Redis client for .NET
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
asaskevich/govalidator
[Go] Package of validators and sanitizers for strings, numerics, slices and structs
MITOct 21, 2026 · metrics 2.10.0
npm
angus-c/just
A library of dependency-free JavaScript utilities that do just one thing.
MITSep 17, 2026 · metrics 2.10.0
PyPI
Akegarasu/lora-scripts
SD-Trainer. LoRA & Dreambooth training scripts & GUI use kohya-ss's trainer, for diffusion model.
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
NuGet
nissl-lab/npoi
a .NET library that can read/write Office formats without Microsoft Office installed. No COM+, no interop.
Apache-2.0Sep 22, 2026 · metrics 2.10.0
Maven
google/google-java-format
Reformats Java source code to comply with Google Java Style.
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
expressjs/cors
Node.js CORS middleware
MITSep 16, 2026 · metrics 2.10.0
npm
lightdash/lightdash
Agentic BI. Analytics at the speed of code ⚡️
Custom licenseOct 20, 2026 · metrics 2.10.0