Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,316
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
memgraph/memgraph
High-performance open-source in-memory graph database for GraphRAG, AI memory, agentic AI, and real-time graph analytics. Cypher-compatible, built in C++.
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
sweet-js/sweet-core
Sweeten your JavaScript.
BSD-2-ClauseOct 24, 2026 · metrics 2.10.0
npm
iconoir-icons/iconoir
An open source icons library with 1600+ icons, supporting React, React Native, Flutter, Vue, Figma, and Framer.
MITSep 15, 2026 · metrics 2.10.0
NuGet
Fody/Fody
Extensible tool for weaving .net assemblies
Custom licenseOct 24, 2026 · metrics 2.10.0
Go
projectdiscovery/interactsh
An OOB interaction gathering server and client library
MITSep 20, 2026 · metrics 2.10.0
Packagist
cakephp/phinx
PHP Database Migrations for Everyone
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI
intuitem/ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
Custom licenseOct 24, 2026 · metrics 2.10.0
NuGet · npm
modelcontextprotocol/csharp-sdk
The official C# SDK for Model Context Protocol servers and clients. Maintained in collaboration with Microsoft.
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
zdhxiong/mdui
Material Design 3(Material You) UI components using Web Components.
No licenseOct 24, 2026 · metrics 2.10.0
RubyGems
github/gemoji
Emoji images and names.
MITOct 24, 2026 · metrics 2.10.0
PyPI
shapely/shapely
Manipulation and analysis of geometric objects
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
Packagist
tecnickcom/TCPDF
Deprecated: PHP PDF library, superseded by tc-lib-pdf (https://github.com/tecnickcom/tc-lib-pdf)
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven · npm
embabel/embabel-agent
Agent framework for the JVM. Pronounced Em-BAY-bel /ɛmˈbeɪbəl/
Apache-2.0Oct 23, 2026 · metrics 2.10.0
crates.io
ProvableHQ/snarkOS
A Decentralized Operating System for ZK Applications
Apache-2.0Sep 29, 2026 · metrics 2.10.0
npm
honestbleeps/Reddit-Enhancement-Suite
Reddit Enhancement Suite
GPL-3.0Oct 24, 2026 · metrics 2.10.0
Go
orcaman/concurrent-map
a thread-safe concurrent map for go
MITSep 23, 2026 · metrics 2.10.0
Go · npm
ory/dockertest
Write better integration tests! Dockertest helps you boot up ephermal docker images for your Go tests with minimal work.
Apache-2.0Sep 23, 2026 · metrics 2.10.0
PyPI
spulec/freezegun
Let your Python tests travel through time
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
aimeos/aimeos-core
Aimeos PHP e-commerce framework for ultra fast online shops, scalable marketplaces, complex B2B applications and #gigacommerce
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
googleapis/google-cloud-go
Google Cloud Client Libraries for Go.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI · npm
pydantic/logfire
AI observability platform for production LLM and agent systems.
MITOct 23, 2026 · metrics 2.10.0
crates.io
timothymiller/cloudflare-ddns
🦀 Rust based dynamic DNS (DDNS) updater for Cloudflare
GPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
auth0/express-jwt
connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes
MITOct 24, 2026 · metrics 2.10.0
npm
stripe/stripe-node
Node.js library for the Stripe API.
MITSep 16, 2026 · metrics 2.10.0
Go
docker/buildx
Docker CLI plugin for extended build capabilities with BuildKit
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
rudderlabs/rudder-server
Privacy and Security focused Segment-alternative, in Golang and React
Custom licenseOct 24, 2026 · metrics 2.10.0
Go
uber-go/dig
A reflection based dependency injection toolkit for Go.
MITOct 21, 2026 · metrics 2.10.0
Go
opencontainers/image-spec
OCI Image Format
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
preactjs/signals
Manage state with style in every framework
MITOct 24, 2026 · metrics 2.10.0
PyPI
ultrajson/ultrajson
Ultra fast JSON decoder and encoder written in C with Python bindings
Custom licenseOct 23, 2026 · metrics 2.10.0