Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,154
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
revive-lint/revive
🔥 Fast, strict, configurable, extensible, and beautiful linter for Go
MITOct 24, 2026 · metrics 2.10.0
NuGet
dotnet/msbuild
The Microsoft Build Engine (MSBuild) is the build platform for .NET and Visual Studio.
MITOct 20, 2026 · metrics 2.10.0
npm
vercel/ms
Tiny millisecond conversion utility
MITSep 16, 2026 · metrics 2.10.0
npm
Dash-Industry-Forum/dash.js
A reference client implementation for the playback of MPEG DASH via Javascript and compliant browsers.
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
ApeWorX/web3.py
A python interface for interacting with the Ethereum blockchain and ecosystem.
MITOct 24, 2026 · metrics 2.10.0
npm
knadh/oat
Ultra-lightweight, zero dependency, semantic HTML, CSS, JS UI library. ~10KB min+gz.
MITOct 24, 2026 · metrics 2.10.0
crates.io
dtolnay/thiserror
derive(Error) for struct and enum error types
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
rubenlagus/TelegramBots
Java library to create bots using Telegram Bots API
MITOct 24, 2026 · metrics 2.10.0
NuGet
AngleSharp/AngleSharp
:angel: The ultimate angle brackets parser library parsing HTML5, MathML, SVG and CSS to construct a DOM based on the official W3C specifications.
MITOct 21, 2026 · metrics 2.10.0
npm
thebuilder/react-intersection-observer
React implementation of the Intersection Observer API to tell you when an element enters or leaves the viewport.
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm · crates.io
biliup/biliup
自动直播录制、投稿、twitch、ytb频道搬运工具。命令行投稿(B站)和视频下载工具，提供多种登录方式，支持多p。边录边传0落盘
MITOct 24, 2026 · metrics 2.10.0
RubyGems
doorkeeper-gem/doorkeeper
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
MITOct 24, 2026 · metrics 2.10.0
Go · Maven · npm
treeverse/lakeFS
lakeFS - Data version control for your data lake | Git for data
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
pythonnet/pythonnet
Python for .NET is a package that gives Python programmers nearly seamless integration with the .NET Common Language Runtime (CLR) and provides a powerful application scripting tool for .NET developers.
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI
hey-api/hey-api
👨🚀 Turn API specifications into production-ready SDKs, validators, mocks, and more. 20+ plugins. Millions of weekly npm downloads. Used by Vercel, OpenCode, PayPal, AWS, Autodesk, and many more.
MITOct 24, 2026 · metrics 2.10.0
Go
x-motemen/gore
Yet another Go REPL that works nicely. Featured with line editing, code completion, and more.
MITSep 19, 2026 · metrics 2.10.0
Go
charmbracelet/wish
Make SSH apps, just like that! 💫
MITSep 20, 2026 · metrics 2.10.0
Maven · npm · RubyGems
pmd/pmd
An extensible multilanguage static code analyzer.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
danger/danger-js
⚠️ Stop saying "you forgot to …" in code review
MITOct 1, 2026 · metrics 2.10.0
npm
valor-software/ngx-bootstrap
Fast and reliable Bootstrap widgets in Angular (supports Ivy engine)
MITOct 18, 2026 · metrics 2.10.0
PyPI
miguelgrinberg/Flask-SocketIO
Socket.IO integration for Flask applications.
MITSep 17, 2026 · metrics 2.10.0
crates.io · PyPI
LaurentMazare/tch-rs
Rust bindings for the C++ api of PyTorch.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
obss/sahi
Framework agnostic sliced/tiled inference + interactive ui + error analysis plots
MITSep 15, 2026 · metrics 2.10.0
npm
expressjs/body-parser
Node.js body parsing middleware
MITSep 16, 2026 · metrics 2.10.0
—
ServiceStack/ServiceStack
Thoughtfully architected, obscenely fast, thoroughly enjoyable web services for all
Custom licenseOct 24, 2026 · metrics 2.10.0
NuGet
domaindrivendev/Swashbuckle.AspNetCore
Swagger tools for documenting API's built on ASP.NET Core
MITOct 24, 2026 · metrics 2.10.0
crates.io · PyPI
kanidm/kanidm
Kanidm: A simple, secure, and fast identity management platform
MPL-2.0Oct 19, 2026 · metrics 2.10.0
PyPI · npm
54yyyu/zotero-mcp
Zotero MCP: Connects your Zotero research library with Claude and other AI assistants via the Model Context Protocol to discuss papers, get summaries, analyze citations, and more.
MITOct 20, 2026 · metrics 2.10.0
Maven
apache/groovy
Apache Groovy: A powerful multi-faceted programming language for the JVM platform
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven
LWJGL/lwjgl3
LWJGL is a Java library that enables cross-platform access to popular native APIs useful in the development of graphics (OpenGL, Vulkan, bgfx), audio (OpenAL, Opus), parallel computing (OpenCL, CUDA) and XR (OpenVR, LibOVR, OpenXR) applications.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0