Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,176
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
RubyGems
rails-api/active_model_serializers
ActiveModel::Serializer implementation and Rails hooks
MITOct 24, 2026 · metrics 2.10.0
Packagist
elastic/elasticsearch-php
Official PHP client for Elasticsearch.
MITOct 20, 2026 · metrics 2.10.0
PyPI · npm
facebook/idb
idb is a flexible command line interface for automating iOS simulators and devices
MITSep 18, 2026 · metrics 2.10.0
npm
varletjs/varlet
A Vue3 component library based on Material Design 2 and 3, supporting mobile and desktop.
MITSep 20, 2026 · metrics 2.10.0
npm
digitalbazaar/forge
A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
Bogdanp/dramatiq
A fast and reliable background task processing library for Python 3.
LGPL-3.0Oct 24, 2026 · metrics 2.10.0
—
warmcat/libwebsockets
canonical libwebsockets.org networking library
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI · Maven
maziyarpanahi/openmed
Local-first healthcare AI: clinical NER & HIPAA PII de-identification that runs 100% on-device. 2,200+ medical models, 21 languages, Apple MLX + Python, no cloud, no patient data leaving your network. Apache-2.0
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
superdesigndev/treg
OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn
Custom licenseOct 16, 2026 · metrics 2.10.0
crates.io
spieglt/FlyingCarpet
Cross-platform AirDrop. File transfer between Android, iOS, Linux, macOS, and Windows over ad hoc WiFi. No network infrastructure required, just two devices with WiFi chips (and optionally Bluetooth) in close range.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
BC-SECURITY/Empire
Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.
BSD-3-ClauseOct 9, 2026 · metrics 2.10.0
PyPI
AnswerDotAI/nbdev
Create delightful software with Jupyter Notebooks
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
LuanRT/YouTube.js
A JavaScript client for YouTube's internal API, known as InnerTube.
MITSep 15, 2026 · metrics 2.10.0
npm
leizongmin/js-xss
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
silenceper/wechat
WeChat SDK for Go （微信SDK：简单、易用）
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
sharpemu/sharpemu
An experimental PlayStation 5 emulator for Windows, Linux and macOS.
GPL-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
RICHQAQ/PasteMD
一键将 Markdown 和网页 AI 对话（ChatGPT/DeepSeek等）完美粘贴到 Word、WPS 和 Excel 的效率工具 | One-click paste Markdown and AI responses (ChatGPT/DeepSeek) into Word, WPS, and Excel perfectly.
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
csstools/sanitize.css
A best-practices CSS foundation
CC0-1.0Sep 17, 2026 · metrics 2.10.0
Packagist · npm
zircote/swagger-php
A php swagger annotation and parsing library
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
hahwul/dalfox
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
MITSep 27, 2026 · metrics 2.10.0
npm
FunnyWolf/Viper
Adversary simulation and Red teaming platform with AI
No licenseSep 16, 2026 · metrics 2.10.0
Go
uber-go/goleak
Goroutine leak detector
MITOct 21, 2026 · metrics 2.10.0
PyPI
fonttools/fonttools
A library to manipulate font files from Python.
MITOct 24, 2026 · metrics 2.10.0
npm · Maven
tiann/hapi
App for Codex / Claude Code / Pi / OpenCode / Kimi Code / Grok Build, vibe coding anytime, anywhere
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
npm · Maven · NuGet
EsotericSoftware/spine-runtimes
2D skeletal animation runtimes for Spine.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
elastic/elasticsearch-js
Official Elasticsearch client library for Node.js
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
geopandas/geopandas
Python tools for geographic data
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
crates.io
rust-lang/rust-bindgen
Automatically generates Rust FFI bindings to C (and some C++) libraries.
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
NVIDIA/cuml
NVIDIA cuML: GPU-Accelerated Machine Learning
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
deckerst/aves
Aves is a gallery and metadata explorer app, built for Android with Flutter.
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0