Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,225
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io · npm
gnmyt/Nexterm
The open source server management software for SSH, VNC & RDP
MITOct 23, 2026 · metrics 2.10.0
PyPI · npm
readthedocs/sphinx_rtd_theme
Sphinx theme from Read the Docs
MITOct 24, 2026 · metrics 2.10.0
npm
loopbackio/loopback-next
LoopBack makes it easy to build modern API applications that require complex integrations.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
NVIDIA/nccl
Optimized primitives for collective multi-GPU communication
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
jeremyevans/sequel
Sequel: The Database Toolkit for Ruby
MITOct 24, 2026 · metrics 2.10.0
npm · RubyGems
phusion/passenger
A fast and robust web server and application server for Ruby, Python and Node.js
MITOct 24, 2026 · metrics 2.10.0
PyPI
quantumlib/Cirq
Python framework for creating, editing, and running Noisy Intermediate-Scale Quantum (NISQ) circuits.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
akkadotnet/akka.net
Canonical actor model implementation for .NET with local + distributed actors in C# and F#.
Custom licenseOct 2, 2026 · metrics 2.10.0
PyPI
cjhutto/vaderSentiment
VADER Sentiment Analysis. VADER (Valence Aware Dictionary and sEntiment Reasoner) is a lexicon and rule-based sentiment analysis tool that is specifically attuned to sentiments expressed in social media, and works well on texts from other domains.
MITOct 24, 2026 · metrics 2.10.0
PyPI
Lyken17/pytorch-OpCounter
Count the MACs / FLOPs of your PyTorch model.
MITOct 24, 2026 · metrics 2.10.0
npm
facebook/memlab
A framework for finding JavaScript memory leaks and analyzing heap snapshots
MITOct 24, 2026 · metrics 2.10.0
Maven
didi/booster
🚀Optimizer for mobile applications
Apache-2.0Oct 23, 2026 · metrics 2.10.0
NuGet
dotnet/MQTTnet
MQTTnet is a high performance .NET library for MQTT based communication. It provides a MQTT client and a MQTT server (broker). The implementation is based on the documentation from http://mqtt.org/.
MITOct 24, 2026 · metrics 2.10.0
RubyGems
vmg/redcarpet
The safe Markdown parser, reloaded.
MITOct 24, 2026 · metrics 2.10.0
Go
yuin/goldmark
:trophy: The Golden Swiss Army Knife for markdown processing. 100% CommonMark compliant, AST w/ CST, Extensible, Fast, CJK-friendly.
MITOct 24, 2026 · metrics 2.10.0
PyPI
Kiln-AI/Kiln
Build, Evaluate, and Optimize AI Systems. Includes evals, RAG, agents, fine-tuning, synthetic data generation, dataset management, MCP, and more.
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI · npm
Marker-Inc-Korea/AutoRAG
AutoRAG: Now your agent can find anything in your computer. It gets smarter if you are using it frequently.
Custom licenseSep 15, 2026 · metrics 2.10.0
npm · Maven · PyPI
react-native-async-storage/async-storage
An asynchronous, persistent, key-value storage system for React Native.
MITSep 17, 2026 · metrics 2.10.0
Maven
sofastack/sofa-boot
SOFABoot is a framework that enhances Spring Boot and fully compatible with it, provides readiness check, class isolation, etc.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go · npm · PyPI
arduino/arduino-cli
Arduino command line tool
GPL-3.0Oct 24, 2026 · metrics 2.10.0
Packagist
giggsey/libphonenumber-for-php
PHP version of Google's phone number handling library
Apache-2.0Oct 24, 2026 · metrics 2.10.0
crates.io · npm
productdevbook/port-killer
A powerful cross-platform port management tool for developers. Monitor ports, manage Kubernetes port forwards, integrate Cloudflare Tunnels, and kill processes with one click.
MITSep 19, 2026 · metrics 2.10.0
npm
hashicorp/terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
MPL-2.0Sep 17, 2026 · metrics 2.10.0
Go · PyPI
alecthomas/chroma
A general purpose syntax highlighter in pure Go
Custom licenseOct 24, 2026 · metrics 2.10.0
Go · npm
pomerium/pomerium
Pomerium is an identity and context-aware access proxy.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
guokaigdg/animal-island-ui
A Kawaii React UI component library 一个可爱的 React UI 组件库
MITOct 23, 2026 · metrics 2.10.0
Packagist · npm
kimai/kimai
Kimai is the #1 open-source time-tracking application. From freelancers to companies and organisations - everyone can manage timesheets, generate reports, create invoices and so much more... Web-based multi-user application, available as On-Premise or SaaS version: https://www.kimai.org
AGPL-3.0Oct 3, 2026 · metrics 2.10.0
—
Arduino-IRremote/Arduino-IRremote
Infrared remote library for Arduino: send and receive infrared signals with multiple protocols
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
stoplightio/prism
Turn any OpenAPI2/3 and Postman Collection file into an API server with mocking, transformations and validations.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
nghttp2/nghttp2
nghttp2 - HTTP/2 C Library and tools
Custom licenseSep 20, 2026 · metrics 2.10.0