Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,085
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
sooperset/mcp-atlassian
MCP server for Atlassian tools (Confluence, Jira)
MITOct 24, 2026 · metrics 2.10.0
npm
elk-zone/elk
A nimble Mastodon web client
MITOct 18, 2026 · metrics 2.10.0
RubyGems
venmo/synx
A command-line tool that reorganizes your Xcode project folder to match your Xcode groups
MITOct 24, 2026 · metrics 2.10.0
Go
volcano-sh/volcano
A Cloud Native Batch System (Project under CNCF)
Apache-2.0Oct 23, 2026 · metrics 2.10.0
—
MrGlockenspiel/activate-linux
The "Activate Windows" watermark ported to Linux
GPL-3.0Oct 24, 2026 · metrics 2.10.0
Go
openfga/openfga
A high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
—
tiny-dnn/tiny-dnn
header only, dependency-free deep learning framework in C++14
Custom licenseOct 19, 2026 · metrics 2.10.0
npm · RubyGems
zammad/zammad
Zammad is a web based open source helpdesk/customer support system.
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
PyPI · npm
ModelEngine-Group/nexent
Nexent is a zero-code platform for auto-generating production-grade AI agents using Harness Engineering principles — unified tools, skills, memory, and orchestration with built-in constraints, feedback loops, and control planes.
MITOct 24, 2026 · metrics 2.10.0
Packagist
spatie/laravel-backup
A package to backup your Laravel app
MITOct 24, 2026 · metrics 2.10.0
crates.io
flamegraph-rs/flamegraph
Easy flamegraphs for Rust projects and everything else, without Perl or pipes <3
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
vuejs/apollo
🚀 Apollo/GraphQL integration for VueJS
MITOct 24, 2026 · metrics 2.10.0
npm · Packagist
alexjustesen/speedtest-tracker
Speedtest Tracker is a self-hosted application that monitors the performance and uptime of your internet connection.
MITOct 22, 2026 · metrics 2.10.0
npm · PyPI · crates.io
FailproofAI/failproofai
Observability and enforcement for AI agent harnesses. Capture every run and runtime reliability with policy enforcement.
Custom licenseOct 23, 2026 · metrics 2.10.0
NuGet
FastEndpoints/FastEndpoints
A light-weight REST API development framework for ASP.NET 8 and newer.
MITOct 21, 2026 · metrics 2.10.0
PyPI
lark-parser/lark
Lark is a parsing toolkit for Python, built with a focus on ergonomics, performance and modularity.
MITOct 24, 2026 · metrics 2.10.0
PyPI
Q00/ouroboros
Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, staged evaluation, budgeted evolution loop. MCP server, 14 runtimes: Claude Code, Codex CLI, Gemini CLI, OpenCode, Copilot, Kiro and more.
MITSep 18, 2026 · metrics 2.10.0
npm
bitcoinjs/bitcoinjs-lib
A javascript Bitcoin library for node.js and browsers.
MITOct 24, 2026 · metrics 2.10.0
—
ningzimu/codex-ppt-skill
GPT-Image-2 PPT Generator Skill for Creating Image-Based PowerPoint Presentations in Codex and Other Skill-Compatible Agents
MITSep 19, 2026 · metrics 2.10.0
PyPI
pyinfra-dev/pyinfra
🔧 pyinfra turns Python code into shell commands and runs them on your servers. Execute ad-hoc commands and write declarative operations. Target SSH servers, local machine and Docker containers. Fast and scales from one server to thousands.
MITSep 19, 2026 · metrics 2.10.0
npm
microsoft/tsyringe
Lightweight dependency injection container for JavaScript/TypeScript
MITSep 15, 2026 · metrics 2.10.0
PyPI
twisted/twisted
Event-driven networking engine written in Python.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
OHF-Voice/piper1-gpl
Fast and local neural text-to-speech engine
GPL-3.0Oct 24, 2026 · metrics 2.10.0
Packagist · PyPI
codeigniter4/CodeIgniter4
Open Source PHP Framework (originally from EllisLab)
MITOct 20, 2026 · metrics 2.10.0
PyPI · crates.io
zensical/zensical
A modern static site generator by the Material for MkDocs team
MITOct 24, 2026 · metrics 2.10.0
crates.io · npm · PyPI
EFForg/rayhunter
Rust tool to detect cell site simulators on an orbic mobile hotspot
GPL-3.0Oct 24, 2026 · metrics 2.10.0
npm · Go
inngest/inngest
The leading workflow orchestration platform. Run stateful step functions and AI workflows on serverless, servers, or the edge.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
lemonade-sdk/lemonade
Lemonade helps users discover and run local AI apps by serving optimized LLMs right from their own GPUs and NPUs. Join our discord: https://discord.gg/5xXzkMu8Zk
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
doctrine/collections
Collections Abstraction Library
MITOct 20, 2026 · metrics 2.10.0
npm
openpgpjs/openpgpjs
OpenPGP implementation for JavaScript
LGPL-3.0Oct 24, 2026 · metrics 2.10.0