Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,141
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
klauspost/compress
Optimized Go Compression Packages
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
developit/unfetch
🐕 Bare minimum 500b fetch polyfill.
MITSep 17, 2026 · metrics 2.10.0
Go
ossf/scorecard
OpenSSF Scorecard - Security health metrics for Open Source
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
danger/danger
🚫 Stop saying "you forgot to …" in code review (in Ruby)
MITOct 24, 2026 · metrics 2.10.0
PyPI
gpustack/gpustack
A GPU cluster manager for high-performance AI model serving (vLLM, SGLang) and on-demand SSH-accessible GPU instances.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI · npm
home-assistant/frontend
:lollipop: Frontend for Home Assistant
Apache-2.0Oct 9, 2026 · metrics 2.10.0
npm
toji/gl-matrix
Javascript Matrix and Vector library for High Performance WebGL apps
MITSep 17, 2026 · metrics 2.10.0
Go
burrowers/garble
Obfuscate Go builds
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
dcastil/tailwind-merge
Merge Tailwind CSS classes without style conflicts
MITSep 16, 2026 · metrics 2.10.0
RubyGems
coorasse/cancancan
The authorization Gem for Ruby on Rails.
MITOct 24, 2026 · metrics 2.10.0
npm
makenotion/notion-sdk-js
Official Notion JavaScript Client
MITOct 24, 2026 · metrics 2.10.0
RubyGems
mislav/will_paginate
Pagination library for Rails and other Ruby applications
MITOct 24, 2026 · metrics 2.10.0
—
ptitSeb/box64
Box64 - Linux Userspace x86_64 Emulator with a twist, targeted at ARM64, RV64 and LoongArch Linux devices
MITOct 19, 2026 · metrics 2.10.0
Go
cri-o/cri-o
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
GargantuaX/gemini-watermark-remover
A high-performance, 100% client-side tool for removing Gemini AI image & video watermarks. Built with pure JavaScript using mathematically precise Reverse Alpha Blending. / 基于 JavaScript 的纯浏览器端 Gemini AI 图像和视频无损去水印工具，使用数学精确的反向 Alpha 混合算法
MITOct 24, 2026 · metrics 2.10.0
Go
buger/jsonparser
THE fastest alternative JSON parser for Go that does not require schema
MITOct 24, 2026 · metrics 2.10.0
PyPI
Blaizzy/mlx-vlm
MLX-VLM is a package for inference and fine-tuning of Vision Language Models (VLMs) on your Mac using MLX.
MITOct 24, 2026 · metrics 2.10.0
npm · Maven
crazycodeboy/react-native-splash-screen
A splash screen for react-native, hide when application loaded ,it works on iOS and Android.
MITOct 24, 2026 · metrics 2.10.0
Go
gogo/protobuf
[Deprecated] Protocol Buffers for Go with Gadgets
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
react/metro
🚇 The JavaScript bundler for React Native
MITOct 24, 2026 · metrics 2.10.0
PyPI
newton-physics/newton
An open-source, GPU-accelerated physics simulation engine built upon NVIDIA Warp, specifically targeting roboticists and simulation researchers.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
vercel/streamdown
A drop-in replacement for react-markdown, designed for AI-powered streaming.
Custom licenseSep 25, 2026 · metrics 2.10.0
Packagist
timber/timber
Create WordPress themes with beautiful OOP code and the Twig Template Engine
MITOct 20, 2026 · metrics 2.10.0
Packagist · npm
nunomaduro/phpinsights
🔰 Instant PHP quality checks from your console
MITOct 24, 2026 · metrics 2.10.0
PyPI
rmax/scrapy-redis
Redis-based components for Scrapy.
MITSep 19, 2026 · metrics 2.10.0
crates.io
serde-rs/json
Strongly typed JSON library for Rust
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go · npm
HuolalaTech/page-spy-web
A remote debugging platform you'll definitely find useful. Lightweight, cross-platform, out-of-box debugging tool
MITSep 15, 2026 · metrics 2.10.0
PyPI
mhammond/pywin32
Python for Windows (pywin32) Extensions
No licenseOct 24, 2026 · metrics 2.10.0
PyPI
tortoise/tortoise-orm
Familiar asyncio ORM for python, built with relations in mind
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
liquibase/liquibase
Main Liquibase Source
Custom licenseOct 19, 2026 · metrics 2.10.0