Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,121
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
alainm23/planify
Task manager with Todoist, Nextcloud & CalDAV support designed for GNOME
GPL-3.0Oct 24, 2026 · metrics 2.10.0
npm
piotrwitek/utility-types
Collection of utility types, complementing TypeScript built-in mapped types and aliases (think "lodash" for static types).
MITSep 17, 2026 · metrics 2.10.0
Go
go-pay/gopay
微信、支付宝、抖音、通联支付、拉卡拉、PayPal、Apple 的Go版本SDK。【极简、易用的聚合支付SDK】
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
istanbuljs/nyc
the Istanbul command line interface
ISCSep 17, 2026 · metrics 2.10.0
NuGet · npm
ChilliCream/graphql-platform
Welcome to the home of the Hot Chocolate GraphQL server for .NET, the Strawberry Shake GraphQL client for .NET and Nitro the awesome Monaco based GraphQL IDE.
MITOct 24, 2026 · metrics 2.10.0
PyPI
martinblech/xmltodict
Python module that makes working with XML feel like you are working with JSON
MITOct 24, 2026 · metrics 2.10.0
RubyGems
rack/rack-attack
Rack middleware for blocking & throttling
MITOct 24, 2026 · metrics 2.10.0
—
shader-slang/slang
Making it easier to work with shaders
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
nodegit/nodegit
Native Node bindings to Git.
MITOct 21, 2026 · metrics 2.10.0
npm
bowser-js/bowser
a browser detector
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
arco-design/arco-design
A comprehensive React UI components library based on Arco Design
MITOct 24, 2026 · metrics 2.10.0
crates.io
rhaiscript/rhai
Rhai - An embedded scripting language for Rust.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Packagist
laravel/socialite
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
MITOct 24, 2026 · metrics 2.10.0
PyPI · crates.io
emmett-framework/granian
A Rust HTTP server for Python applications
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
NuGet · PyPI
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
MITOct 24, 2026 · metrics 2.10.0
RubyGems
fastruby/fast-ruby
:dash: Writing Fast Ruby :heart_eyes: -- Collect Common Ruby idioms.
No licenseOct 24, 2026 · metrics 2.10.0
Go
karmada-io/karmada
Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm · crates.io
junhoyeo/tokscale
🛰️ Track token usage across AI coding agents from your terminal. 🏅 Global leaderboard with trillions of tokens tracked.
MITOct 24, 2026 · metrics 2.10.0
PyPI
pylint-dev/pylint
It's not just a linter that annoys you!
GPL-2.0Sep 22, 2026 · metrics 2.10.0
Go
kgateway-dev/kgateway
The Cloud-Native API Gateway and AI Gateway
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
python-openxml/python-docx
Create and modify Word documents with Python
MITSep 16, 2026 · metrics 2.10.0
Go · PyPI
agentscope-ai/AgentTeams
An open-source Collaborative Multi-Agent OS for transparent, human-in-the-loop task coordination via Matrix rooms.
Apache-2.0Oct 9, 2026 · metrics 2.10.0
PyPI
jpadilla/pyjwt
JSON Web Token implementation in Python
MITOct 24, 2026 · metrics 2.10.0
PyPI
python-websockets/websockets
Library for building WebSocket servers and clients in Python
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
middleapi/orpc
Typesafe APIs Made Simple 🪄
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI
meta-pytorch/captum
Model interpretability and understanding for PyTorch
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
crates.io · npm
trailbaseio/trailbase
An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.
OSL-3.0Oct 20, 2026 · metrics 2.10.0
Maven
diffplug/spotless
Keep your code spotless
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
vi3k6i5/flashtext
Extract Keywords from sentence or Replace keywords in sentences.
MITSep 17, 2026 · metrics 2.10.0
npm
jgraph/drawio-mcp
No repository description published.
Apache-2.0Oct 24, 2026 · metrics 2.10.0