Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,105
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go · PyPI
goss-org/goss
Quick and Easy server testing/validation
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
Permify/permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth 🎉
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
Maven · PyPI
JSQLParser/JSqlParser
JSqlParser parses an SQL statement and translate it into a hierarchy of Java classes. The generated hierarchy can be navigated using the Visitor Pattern
Apache-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
hartator/wayback-machine-downloader
Download an entire website from the Wayback Machine.
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
likec4/likec4
Visualize, collaborate, and evolve the software architecture with always actual and live diagrams from your code
MITOct 24, 2026 · metrics 2.10.0
Go · PyPI
kserve/kserve
Standardized Distributed Generative and Predictive AI Inference Platform for Scalable, Multi-Framework Deployment on Kubernetes
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems · npm
lostisland/faraday
Simple, but flexible HTTP client library, with support for multiple backends.
MITOct 24, 2026 · metrics 2.10.0
npm · Go
samchon/typia
Super-fast/easy runtime validators and serializers via transformation
MITOct 24, 2026 · metrics 2.10.0
Maven
Kotlin/kotlinx.serialization
Kotlin multiplatform / multi-format serialization
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
itsgoingd/clockwork
Clockwork - php dev tools in your browser - server-side component
MITOct 24, 2026 · metrics 2.10.0
npm
import-js/eslint-plugin-import
ESLint plugin with rules that help validate proper imports.
MITSep 16, 2026 · metrics 2.10.0
npm · Go
fengshao1227/ccg-workflow
多模型协作工作流引擎 — /ccg:go 一个命令，AI 自动分析意图、选择策略、编排 Codex + Gemini + Claude 协作执行
MITOct 24, 2026 · metrics 2.10.0
npm
baairon/torlink
👾 A sleek, zero-setup torrent finder and downloader that lives right in your terminal.
MITOct 21, 2026 · metrics 2.10.0
Go
hacdias/webdav
A simple and standalone WebDAV server.
MITOct 22, 2026 · metrics 2.10.0
NuGet
danielgerlag/workflow-core
Lightweight workflow engine for .NET Standard
MITOct 19, 2026 · metrics 2.10.0
crates.io
rust-lang/futures-rs
Zero-cost asynchronous programming in Rust
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
Giskard-AI/giskard-oss
🐢 Open-Source Evaluation & Testing library for LLM Agents
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
isaacs/node-lru-cache
A fast cache that automatically deletes the least recently used items
BlueOak-1.0.0Oct 23, 2026 · metrics 2.10.0
PyPI · npm
AgentOps-AI/agentops
Python SDK for AI agent monitoring, LLM cost tracking, benchmarking, and more. Integrates with most LLMs and agent frameworks including CrewAI, Agno, OpenAI Agents SDK, Langchain, Autogen, AG2, and CamelAI
MITOct 24, 2026 · metrics 2.10.0
Packagist
spatie/laravel-activitylog
Log activity inside your Laravel app
MITOct 24, 2026 · metrics 2.10.0
crates.io · Go · npm
HelixDB/helix-db
HelixDB is an OLTP graph database with native vector and full-text search built in Rust on Object Storage.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
MITOct 24, 2026 · metrics 2.10.0
—
c3lang/c3c
Compiler for the C3 language
MITOct 24, 2026 · metrics 2.10.0
PyPI
dpkp/kafka-python
Python client for Apache Kafka
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
smogon/pokemon-showdown
Pokémon battle simulator.
MITSep 19, 2026 · metrics 2.10.0
RubyGems
jnunemaker/httparty
:tada: Makes http fun again!
MITOct 24, 2026 · metrics 2.10.0
npm
microsoft/typespec
No repository description published.
MITOct 24, 2026 · metrics 2.10.0
Packagist
vimeo/psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
MITOct 20, 2026 · metrics 2.10.0
—
KhronosGroup/MoltenVK
MoltenVK is a Vulkan Portability implementation. It layers a subset of the high-performance, industry-standard Vulkan graphics and compute API over Apple's Metal graphics framework, enabling Vulkan applications to run on macOS, iOS and tvOS.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
actions/toolkit
The GitHub ToolKit for developing GitHub Actions.
MITOct 24, 2026 · metrics 2.10.0