Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,327
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
goravel/goravel
The full-featured Golang Development Framework skeleton
MITOct 19, 2026 · metrics 2.10.0
Packagist
jenssegers/agent
👮 A PHP desktop/mobile user agent parser with support for Laravel, based on Mobiledetect
MITOct 20, 2026 · metrics 2.10.0
Maven
deepjavalibrary/djl
An Engine-Agnostic Deep Learning Framework in Java
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io · PyPI
aya-rs/aya
Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.
Apache-2.0Oct 17, 2026 · metrics 2.10.0
npm
effector/effector
Business logic with ease ☄️
MITOct 21, 2026 · metrics 2.10.0
Go
uber-go/automaxprocs
Automatically set GOMAXPROCS to match Linux container CPU quota.
MITOct 21, 2026 · metrics 2.10.0
npm
ant-design/x
Craft AI-driven interface effortlessly🤖
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
py-why/EconML
ALICE (Automated Learning and Intelligence for Causation and Economics) is a Microsoft Research project aimed at applying Artificial Intelligence concepts to economic decision making. One of its goals is to build a toolkit that combines state-of-the-art machine learning techniques with econometrics in order to bring automation to complex causal inference problems. To date, the ALICE Python SDK (econml) implements orthogonal machine learning algorithms such as the double machine learning work of Chernozhukov et al. This toolkit is designed to measure the causal effect of some treatment variable(s) t on an outcome variable y, controlling for a set of features x.
Custom licenseOct 18, 2026 · metrics 2.10.0
Packagist
endroid/qr-code
PHP QR Code library that helps you create QR codes in a jiffy
MITOct 20, 2026 · metrics 2.10.0
Go
graph-gophers/graphql-go
GraphQL server with a focus on ease of use
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
npm · Hex
blockscout/blockscout
Blockchain explorer for Ethereum based network and a tool for inspecting and analyzing EVM based blockchains.
Custom licenseOct 21, 2026 · metrics 2.10.0
crates.io
hyperlight-dev/hyperlight
Hyperlight is a lightweight Virtual Machine Manager (VMM) designed to be embedded within applications. It enables safe execution of untrusted code within micro virtual machines with very low latency and minimal overhead.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
bytedeco/javacpp
The missing bridge between Java and native C++
Custom licenseOct 19, 2026 · metrics 2.10.0
Packagist
mpdf/mpdf
PHP library generating PDF files from UTF-8 encoded HTML
GPL-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
scala-native/scala-native
Your favorite language gets closer to bare metal.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
magefile/mage
a Make/rake-like dev tool using Go
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
discord-jda/JDA
Java wrapper for the popular chat & VOIP service: Discord https://discord.com
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
dragonmantank/cron-expression
CRON for PHP: Calculate the next or previous run date and determine if a CRON expression is due
MITOct 20, 2026 · metrics 2.10.0
PyPI · crates.io
topgrade-rs/topgrade
Upgrade all the things
GPL-3.0Oct 20, 2026 · metrics 2.10.0
npm
makenotion/notion-mcp-server
Official Notion MCP Server
MITOct 22, 2026 · metrics 2.10.0
NuGet
autofac/Autofac
An addictive .NET IoC container
MITOct 20, 2026 · metrics 2.10.0
Packagist
symfony/filesystem
Provides basic utilities for the filesystem
MITOct 20, 2026 · metrics 2.10.0
Maven
torakiki/pdfsam
PDFsam, a desktop application to split, merge, mix, rotate PDF files and extract pages
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
crates.io
smoltcp-rs/smoltcp
a smol tcp/ip stack
0BSDOct 19, 2026 · metrics 2.10.0
Maven · PyPI
JetBrains/koog
Koog is a JVM (Java and Kotlin) framework for building predictable, fault-tolerant and enterprise-ready AI agents across all platforms – from backend services to Android and iOS, JVM, and even in-browser environments. Koog is based on our AI products expertise and provides proven solutions for complex LLM and AI problems
Apache-2.0Oct 21, 2026 · metrics 2.10.0
NuGet
dotnet/Open-XML-SDK
Open XML SDK by Microsoft
MITOct 21, 2026 · metrics 2.10.0
npm · crates.io
ruvnet/RuVector
RuVector provides High Performance, Real-Time decisions and agent memory , Self-Learning Ai, Vector GNN DB built in Rust.
MITOct 20, 2026 · metrics 2.10.0
Go
NVIDIA/nvidia-container-toolkit
Build and run containers leveraging NVIDIA GPUs
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
uber-go/dig
A reflection based dependency injection toolkit for Go.
MITOct 21, 2026 · metrics 2.10.0
Maven
flutter-webrtc/flutter-webrtc
WebRTC plugin for Flutter Mobile/Desktop/Web
MITOct 17, 2026 · metrics 2.10.0