Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,284
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
zh-lx/pinyin-pro
中文转拼音、拼音音调、拼音声母、拼音韵母、多音字拼音、姓氏拼音、拼音匹配、中文分词
MITOct 24, 2026 · metrics 2.10.0
crates.io
hyperlight-dev/hyperlight
Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
harmonoid/harmonoid
🎵 Plays & manages your music library. Looks beautiful & juicy. Available for Windows, GNU/Linux, macOS, Android & iOS.
Custom licenseSep 20, 2026 · metrics 2.10.0
—
OpenMoonRay/openmoonray
MoonRay is an open-source, award-winning, state-of-the-art production path tracing renderer, initially developed at DreamWorks and an active member project of the Academy Software Foundation.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
suren-atoyan/monaco-react
Monaco Editor for React - use the monaco-editor in any React application without needing to use webpack (or rollup/parcel/etc) configuration files / plugins
MITSep 17, 2026 · metrics 2.10.0
PyPI · Go · npm
infiniflow/infinity
The AI-native database built for LLM applications, providing incredibly fast hybrid search of dense vector, sparse vector, tensor (multi-vector), and full-text.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm · NuGet
sebastienros/jint
Javascript Interpreter for .NET
BSD-2-ClauseOct 24, 2026 · metrics 2.10.0
npm
baidu/san
A fast, portable, flexible JavaScript component framework
MITOct 24, 2026 · metrics 2.10.0
Maven
osfans/trime
同文安卓輸入法平臺3.x/Android-rime/Rime Input Method Engine for Android
GPL-3.0Oct 24, 2026 · metrics 2.10.0
PyPI
PrimeIntellect-ai/verifiers
Our library for RL environments + evals
MITOct 24, 2026 · metrics 2.10.0
Go · npm
dkron-io/dkron
Dkron - Distributed, fault tolerant job scheduling system https://dkron.io
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
Go · RubyGems
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
latitude-dev/latitude-llm
Open-source observability for AI agents. Find where your agents fail, dispatch your coding agent to fix it, and verify the fix against real traces.
MITOct 24, 2026 · metrics 2.10.0
npm
jd-opensource/taro-ui
一款基于 Taro 框架开发的多端 UI 组件库
MITOct 24, 2026 · metrics 2.10.0
—
acassen/keepalived
Keepalived
GPL-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
robusta-dev/krr
Prometheus-based Kubernetes Resource Recommendations
MITSep 18, 2026 · metrics 2.10.0
Packagist
symfony/polyfill-php72
Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
MITOct 24, 2026 · metrics 2.10.0
Maven
stleary/JSON-java
A reference implementation of a JSON package in Java.
Custom licenseOct 24, 2026 · metrics 2.10.0
—
x-cmd/x-cmd
Shell Superpowers for AI Agents.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. （该项目不再维护。）
MITOct 24, 2026 · metrics 2.10.0
PyPI
OpenNMT/CTranslate2
Fast inference engine for Transformer models
MITOct 24, 2026 · metrics 2.10.0
Go
uber-go/ratelimit
A Go blocking leaky-bucket rate limit implementation
MITSep 15, 2026 · metrics 2.10.0
npm
capricorn86/happy-dom
A JavaScript implementation of a web browser without its graphical user interface
MITOct 23, 2026 · metrics 2.10.0
PyPI · npm
strawberry-graphql/strawberry
A GraphQL library for Python that leverages type annotations 🍓
MITSep 17, 2026 · metrics 2.10.0
—
PancakeTAS/lsfg-vk
Lossless Scaling Frame Generation on Linux
No licenseOct 24, 2026 · metrics 2.10.0
PyPI
deanmalmgren/textract
extract text from any document. no muss. no fuss.
MITSep 17, 2026 · metrics 2.10.0
—
microsoft/WindowsAppSDK
The Windows App SDK empowers all Windows desktop apps with modern Windows UI, APIs, and platform features, including back-compat support, shipped via NuGet.
MITOct 24, 2026 · metrics 2.10.0
Go · npm
yangjian102621/geekai
AI 助手全套开源解决方案，自带运营管理后台，开箱即用。集成了 ChatGPT, Azure, ChatGLM,讯飞星火，文心一言等多个平台的大语言模型。支持 MJ AI 绘画，Stable Diffusion AI 绘画，微博热搜等插件工具。采用 Go + Vue3 + element-plus 实现。
Apache-2.0Oct 9, 2026 · metrics 2.10.0
Packagist
webonyx/graphql-php
PHP implementation of the GraphQL specification based on the reference implementation in JavaScript
MITOct 24, 2026 · metrics 2.10.0
npm
jsonresume/resume-cli
MOVED to jsonresume/jsonresume.org (packages/cli) — npm 'resume-cli' unchanged, revived for Node 18+
MITOct 24, 2026 · metrics 2.10.0