Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,192
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
NuGet
umbraco/Umbraco-CMS
Umbraco is a free and open source .NET content management system helping you deliver delightful digital experiences.
MITSep 15, 2026 · metrics 2.10.0
npm · PyPI
microsoft/SynapseML
Simple and Distributed Machine Learning Python Library porting ML algorithms for Spark
MITSep 17, 2026 · metrics 2.10.0
—
dotnet/Silk.NET
The high-speed OpenGL, OpenCL, OpenAL, OpenXR, GLFW, SDL, Vulkan, Assimp, WebGPU, and DirectX bindings library your mother warned you about.
MITOct 24, 2026 · metrics 2.10.0
PyPI
biopython/biopython
Official git repository for Biopython (originally converted from CVS)
Custom licenseOct 24, 2026 · metrics 2.10.0
Maven · npm
reactor/reactor-core
Non-Blocking Reactive Foundation for the JVM
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
pypa/sampleproject
A sample project that exists for PyPUG's "Tutorial on Packaging and Distributing Projects"
MITSep 17, 2026 · metrics 2.10.0
npm
swup/swup
Versatile and extensible page transition library for server-rendered websites 🎉
MITOct 11, 2026 · metrics 2.10.0
npm
KnockOutEZ/wigolo
The go-to web for your AI coding agent — local-first search, fetch, crawl & research over MCP. No API keys, no cloud, $0/query. Public beta.
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
standard-things/esm
Tomorrow's ECMAScript modules today!
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
awslabs/gluonts
Probabilistic time series modeling in Python
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
grafana/mimir
Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
chakra-ui/zag
Build your design system in React, Solid, Vue, Svelte or Vanilla. Powered by finite state machines
MITOct 19, 2026 · metrics 2.10.0
Packagist · npm
laravel/telescope
An elegant debug assistant for the Laravel framework.
MITOct 24, 2026 · metrics 2.10.0
RubyGems
aasm/aasm
AASM - State machines for Ruby classes (plain Ruby, ActiveRecord, Mongoid, NoBrainer, Dynamoid)
MITOct 24, 2026 · metrics 2.10.0
crates.io · npm
fallow-rs/fallow
Codebase intelligence for TypeScript and JavaScript. Health, complexity hotspots, duplication, architecture boundaries, circular dependencies, design-system drift, and unused code, from one graph. CLI, GitHub Action, LSP, MCP, and VS Code. Rust, MIT licensed.
MITOct 24, 2026 · metrics 2.10.0
Go
gdamore/tcell
Tcell is an alternate terminal package, similar in some ways to termbox, but better in others.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Hex
rrrene/credo
A static code analysis tool for the Elixir language with a focus on code consistency and teaching.
MITOct 24, 2026 · metrics 2.10.0
npm
piscinajs/piscina
A fast, efficient Node.js Worker Thread Pool implementation
Custom licenseOct 23, 2026 · metrics 2.10.0
RubyGems
asciidoctor/asciidoctor
:gem: A fast, open source text processor and publishing toolchain, written in Ruby, for converting AsciiDoc content to HTML 5, DocBook 5, and other formats.
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
Orillusion/orillusion
Orillusion is a pure Web3D rendering engine which is fully developed based on the WebGPU standard.
MITOct 24, 2026 · metrics 2.10.0
PyPI
bukosabino/ta
Technical Analysis Library using Pandas and Numpy
MITSep 17, 2026 · metrics 2.10.0
npm
unlayer/react-email-editor
Drag-n-Drop Email Editor Component for React.js
MITSep 15, 2026 · metrics 2.10.0
Go
harvester/harvester
Open source hyperconverged infrastructure (HCI) software
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go · PyPI
helmfile/helmfile
Declaratively deploy your Kubernetes manifests, Kustomize configs, and Charts as Helm releases. Generate all-in-one manifests for use with ArgoCD.
MITOct 24, 2026 · metrics 2.10.0
crates.io
console-rs/indicatif
A command line progress reporting library for Rust
MITSep 17, 2026 · metrics 2.10.0
npm
rajnandan1/kener
Stunning status pages, batteries included!
MITOct 24, 2026 · metrics 2.10.0
Go
Ullaakut/cameradar
Cameradar hacks its way into RTSP videosurveillance cameras
MITSep 18, 2026 · metrics 2.10.0
RubyGems
rest-client/rest-client
Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.
MITOct 24, 2026 · metrics 2.10.0
RubyGems
cucumber/cucumber-ruby
Cucumber for Ruby. It's amazing!
MITOct 24, 2026 · metrics 2.10.0
RubyGems
formtastic/formtastic
A Rails form builder plugin with semantically rich and accessible markup.
MITOct 24, 2026 · metrics 2.10.0