Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,225
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
oklog/ulid
Universally Unique Lexicographically Sortable Identifier (ULID) in Go
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
web-infra-dev/modern.js
A progressive web framework based on React and Rsbuild.
MITOct 24, 2026 · metrics 2.10.0
PyPI
pypa/virtualenv
Virtual Python Environment builder
MITSep 16, 2026 · metrics 2.10.0
npm · Maven
itinance/react-native-fs
Native filesystem access for react-native
MITOct 24, 2026 · metrics 2.10.0
npm · RubyGems
sitespeedio/sitespeed.io
sitespeed.io is an open-source tool for comprehensive web performance analysis, enabling you to test, monitor, and optimize your website’s speed using real browsers in various environments.
MITOct 24, 2026 · metrics 2.10.0
npm
opennextjs/opennextjs-aws
Open-source Next.js adapter for AWS
MITOct 24, 2026 · metrics 2.10.0
—
MaaXYZ/MaaFramework
基于图像识别的自动化黑盒测试框架 | An automation black-box testing framework based on image recognition
LGPL-3.0Oct 20, 2026 · metrics 2.10.0
npm
kangax/html-minifier
Javascript-based HTML compressor/minifier (with Node.js support)
MITSep 17, 2026 · metrics 2.10.0
PyPI
pytorch/executorch
On-device AI across mobile, embedded and edge for PyTorch
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI · RubyGems
google/pytype
A static type analyzer for Python code
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
unifiedjs/unified
Parse, inspect, transform, and serialize content with syntax trees
MITSep 17, 2026 · metrics 2.10.0
crates.io
domcyrus/rustnet
Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go · crates.io
BurntSushi/toml
TOML parser for Golang with reflection.
MITOct 20, 2026 · metrics 2.10.0
npm
frangoteam/FUXA
Web-based Process Visualization (SCADA/HMI/Dashboard) software
MITSep 18, 2026 · metrics 2.10.0
crates.io
tauri-apps/wry
Cross-platform WebView library in Rust for Tauri.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
RubyGems
Netflix/fast_jsonapi
No Longer Maintained - A lightning fast JSON:API serializer for Ruby Objects.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
exa-labs/exa-mcp-server
Exa MCP for web search and web crawling!
MITSep 18, 2026 · metrics 2.10.0
NuGet · PyPI
t1m0thyj/WinDynamicDesktop
Port of macOS Mojave Dynamic Desktop feature to Windows
MPL-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
asterinas/asterinas
Asterinas aims to be a production-grade Linux alternative—memory safe, high-performance, and more.
MPL-2.0Oct 24, 2026 · metrics 2.10.0
Go · PyPI
testcontainers/testcontainers-go
Testcontainers for Go is a Go package that makes it simple to create and clean up container-based dependencies for automated integration/smoke tests. The clean, easy-to-use API enables developers to programmatically define containers that should be run as part of a test and clean up those resources when the test is done.
MITOct 24, 2026 · metrics 2.10.0
PyPI
ag2ai/ag2
AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3x
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
PHP-FFMpeg/PHP-FFMpeg
An object oriented PHP driver for FFMpeg binary
MITOct 20, 2026 · metrics 2.10.0
PyPI
ReactiveX/RxPY
ReactiveX for Python
MITSep 17, 2026 · metrics 2.10.0
—
CrowCpp/Crow
A Fast and Easy to use microframework for the web.
Custom licenseOct 24, 2026 · metrics 2.10.0
NuGet
Tyrrrz/CliWrap
Library for interacting with command-line interfaces
MITOct 24, 2026 · metrics 2.10.0
npm
openclaw/mcporter
Call MCPs via TypeScript, masquerading as simple TypeScript API. Or package them as cli.
MITSep 16, 2026 · metrics 2.10.0
crates.io · Maven
AsamK/signal-cli
signal-cli provides an unofficial commandline, JSON-RPC and dbus interface for the Signal messenger.
GPL-3.0Oct 24, 2026 · metrics 2.10.0
—
terraform-aws-modules/terraform-aws-eks
Terraform module to create Amazon Elastic Kubernetes (EKS) resources 🇺🇦
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
Instagram/MonkeyType
A Python library that generates static type annotations by collecting runtime types
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
actions/setup-node
Set up your GitHub Actions workflow with a specific version of node.js
MITOct 24, 2026 · metrics 2.10.0