Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,298
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
CarGuo/gsy_flutter_book
Flutter 完整开发实战详解系列，提供在线预览和pdf下载，本系列将完整讲述：如何快速从 0 开发一个完整的 Flutter APP，配套高完成度 Flutter 开源项目 GSYGithubAppFlutter ，同时会提供一些Flutter的开发细节技巧，之后深入源码和实战为你全面解析 Flutter 。
MITOct 24, 2026 · metrics 2.10.0
PyPI
Yelp/detect-secrets
An enterprise friendly way of detecting and preventing secrets in code.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
cloudflare/workers-sdk
⛅️ Home to Wrangler, the CLI for Cloudflare Workers®
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven
mozilla/rhino
Rhino is an open-source implementation of JavaScript written entirely in Java
Custom licenseOct 24, 2026 · metrics 2.10.0
Maven
h2database/h2database
H2 is an embeddable RDBMS written in Java.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
Azure/azure-cli
Azure Command-Line Interface
MITSep 17, 2026 · metrics 2.10.0
—
stackblitz/webcontainer-core
Dev environments. In your web app.
MITSep 17, 2026 · metrics 2.10.0
Packagist
symfony/filesystem
Provides basic utilities for the filesystem
MITOct 20, 2026 · metrics 2.10.0
Go · npm
cerbos/cerbos
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven
torakiki/pdfsam
PDFsam, a desktop application to split, merge, mix, rotate PDF files and extract pages
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
Maven
objectbox/objectbox-java
Database for Android and JVM - first and fast, lightweight on-device vector database
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go · npm
prest/prest
Instant REST and MCP APIs for PostgreSQL and MySQL, on existing or new databases. CRUD, custom SQL routes, auth and ACL without writing a backend. Low-code, ⚡ realtime, high-performance. Native MySQL support since v2.5.
MITOct 24, 2026 · metrics 2.10.0
crates.io
smoltcp-rs/smoltcp
a smol tcp/ip stack
0BSDOct 19, 2026 · metrics 2.10.0
crates.io
plotters-rs/plotters
A rust drawing library for high quality data plotting for both WASM and native, statically and realtimely 🦀 📈🚀
MITSep 17, 2026 · metrics 2.10.0
Maven · PyPI
JetBrains/koog
Koog is a JVM (Java and Kotlin) framework for building predictable, fault-tolerant and enterprise-ready AI agents across all platforms – from backend services to Android and iOS, JVM, and even in-browser environments. Koog is based on our AI products expertise and provides proven solutions for complex LLM and AI problems
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
apostrophecms/apostrophe
A full-featured, open-source content management framework built with Node.js that empowers organizations by combining in-context editing and headless architecture in a full-stack JS environment.
No licenseSep 17, 2026 · metrics 2.10.0
npm
JamesIves/github-pages-deploy-action
🚀 Automatically deploy your project to GitHub Pages using GitHub Actions. This action can be configured to push your production-ready code into any branch you'd like.
MITOct 24, 2026 · metrics 2.10.0
PyPI
pyrogram/pyrogram
Elegant, modern and asynchronous Telegram MTProto API framework in Python for users and bots
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
FormidableLabs/react-live
A flexible playground for live editing React components
MITOct 24, 2026 · metrics 2.10.0
PyPI · npm
VRSEN/agency-swarm
Reliable Multi-Agent Orchestration Framework
MITOct 24, 2026 · metrics 2.10.0
crates.io · npm
rivet-dev/agentos
Give agents an operating system as a library. Runs in your existing backend – no sandboxes, VMs, or SaaS. Powered by WebAssembly & V8 isolates.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
NuGet
dotnet/Open-XML-SDK
Open XML SDK by Microsoft
MITOct 21, 2026 · metrics 2.10.0
NuGet
xunit/xunit
xUnit.net is a free, open source, community-focused unit testing tool for .NET.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
spec-first/connexion
Connexion is a modern Python web framework that makes spec-first and api-first development easy.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
amzxyz/rime-wanxiang
「万象拼音」：把算法留在幕后，把纯粹还给指尖，用更优质的数据，接管你的候选。
CC-BY-4.0Sep 19, 2026 · metrics 2.10.0
Maven
babashka/babashka
Native, fast starting Clojure interpreter for scripting
EPL-1.0Sep 19, 2026 · metrics 2.10.0
Go
cloudwego/netpoll
A high-performance non-blocking I/O networking framework focusing on RPC scenarios.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI · Go · crates.io
element-hq/synapse
Synapse: Matrix homeserver written in Python/Twisted + Rust
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
—
firefox-devtools/debugger
The faster and smarter Debugger for Firefox DevTools 🔥🦊🛠
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
tensorflow/datasets
TFDS is a collection of datasets ready to use with TensorFlow, Jax, ...
Apache-2.0Oct 24, 2026 · metrics 2.10.0