Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,241
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
actions/setup-node
Set up your GitHub Actions workflow with a specific version of node.js
MITOct 24, 2026 · metrics 2.10.0
Go · npm
parca-dev/parca
Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
RubyGems · npm
ddnexus/pagy
Agnostic pagination in plain ruby
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI · crates.io +4
mock-server/mockserver-monorepo
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm · Maven
react-native-webrtc/react-native-webrtc
The WebRTC module for React Native
MITOct 24, 2026 · metrics 2.10.0
PyPI · npm
jazzband/django-silk
Silky smooth profiling for Django
MITSep 17, 2026 · metrics 2.10.0
PyPI
sktime/pytorch-forecasting
Time series forecasting with PyTorch
MITSep 17, 2026 · metrics 2.10.0
RubyGems
mbleigh/acts-as-taggable-on
A tagging plugin for Rails applications that allows for custom tagging along dynamic contexts.
MITOct 24, 2026 · metrics 2.10.0
PyPI
hynek/structlog
Simple, powerful, and fast logging for Python.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI · npm
python-jsonschema/jsonschema
An implementation of the JSON Schema specification for Python
MITSep 16, 2026 · metrics 2.10.0
Maven
JodaOrg/joda-time
Joda-Time is the widely used replacement for the Java date and time classes prior to Java SE 8.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
googlemaps/google-maps-services-python
Python client library for Google Maps API Web Services
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
shoutem/ui
Customizable set of components for React Native applications
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
bitpay/bitcore
A full stack for bitcoin and blockchain-based applications
MITOct 24, 2026 · metrics 2.10.0
NuGet
protobuf-net/protobuf-net
Protocol Buffers library for idiomatic .NET
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
cssnano/cssnano
A modular CSS minifier, built on top of the PostCSS ecosystem.
MITSep 17, 2026 · metrics 2.10.0
npm · PyPI
qixing-jk/all-api-hub
All-in-one New-API/Sub2API account hub: balance/usage dashboard, auto check-in, one-click keys, price comparison, health checks, plus advanced channel management | 一站式 New-API/Sub2API 等中转站账号管理：余额/用量看板、自动签到、密钥一键使用、价格对比、可用性测试，另提供高级渠道管理
AGPL-3.0Oct 23, 2026 · metrics 2.10.0
Go
slack-go/slack
Slack API in Go
BSD-2-ClauseOct 24, 2026 · metrics 2.10.0
npm · PyPI
DefectDojo/django-DefectDojo
Open-Source Unified Vulnerability Management, DevSecOps & ASPM
BSD-3-ClauseSep 30, 2026 · metrics 2.10.0
npm
microsoft/tsdoc
A doc comment standard for TypeScript
MITSep 16, 2026 · metrics 2.10.0
NuGet
MediaBrowser/Emby
Emby Server is a personal media server with apps on just about every device.
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Go
go-mysql-org/go-mysql
a powerful mysql toolset with Go
MITOct 24, 2026 · metrics 2.10.0
crates.io · PyPI
mozilla/uniffi-rs
a multi-language bindings generator for rust
MPL-2.0Sep 15, 2026 · metrics 2.10.0
NuGet
Kinnara/ModernWpf
Modern styles and controls for your WPF applications
MITOct 24, 2026 · metrics 2.10.0
npm
Leonidas-from-XIV/node-xml2js
XML to JavaScript object converter.
MITSep 17, 2026 · metrics 2.10.0
Go
apache/dubbo-go
Go Implementation For Apache Dubbo .
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI · npm
dpgaspar/Flask-AppBuilder
Simple and rapid application development framework, built on top of Flask. includes detailed security, auto CRUD generation for your models, google charts and much more. Demo (login with guest/welcome) - http://flaskappbuilder.pythonanywhere.com/
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
Waishnav/devspace
Minimal Coding Agent Harness on MCP for ChatGPT, Claude, Hermes, Grok Bot, OpenClaw
MITSep 20, 2026 · metrics 2.10.0
Go
open-telemetry/opentelemetry-collector-contrib
Contrib repository for the OpenTelemetry Collector
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
unplugin/unplugin-icons
🤹 Access thousands of icons as components on-demand universally.
MITOct 21, 2026 · metrics 2.10.0