Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,330
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
ultrajson/ultrajson
Ultra fast JSON decoder and encoder written in C with Python bindings
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
XTLS/RealiTLScanner
A TLS server scanner for Reality
MPL-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
unionai-oss/pandera
A light-weight, flexible, and expressive statistical data testing library
MITOct 24, 2026 · metrics 2.10.0
Maven
flutter-webrtc/flutter-webrtc
WebRTC plugin for Flutter Mobile/Desktop/Web
MITOct 17, 2026 · metrics 2.10.0
npm
simonwep/pickr
🎨 Pickr - A simple, multi-themed, responsive and hackable Color-Picker library. No dependencies, no jQuery. Compatible with all CSS Frameworks e.g. Bootstrap, Materialize. Supports alpha channel, rgba, hsla, hsva and more!
MITOct 24, 2026 · metrics 2.10.0
npm
ever-co/ever-gauzy
Ever® Gauzy™ - Open Business Management Platform (ERP/CRM/HRM/ATS/PM) - https://gauzy.co
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
googleapis/google-api-go-client
Auto-generated Google APIs for Go.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
npm
jonschlinkert/gray-matter
Smarter YAML front matter parser, used by metalsmith, Gatsby, Netlify, Assemble, mapbox-gl, phenomic, vuejs vitepress, TinaCMS, Shopify Polaris, Ant Design, Astro, hashicorp, garden, slidev, saber, sourcegraph, and many others. Simple to use, and battle tested. Parses YAML by default but can also parse JSON Front Matter, Coffee Front Matter, TOML Front Matter, and has support for custom parsers. Please follow gray-matter's author: https://github.com/jonschlinkert
MITSep 17, 2026 · metrics 2.10.0
RubyGems
ankane/ahoy
Simple, powerful, first-party analytics for Rails
MITOct 24, 2026 · metrics 2.10.0
NuGet
grpc/grpc-dotnet
gRPC for .NET
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
danielgtaylor/huma
Huma REST/HTTP API Framework for Golang with OpenAPI 3.1
MITOct 24, 2026 · metrics 2.10.0
npm · PyPI
kirodotdev/KiroCrew
A persistent workspace for development work that self-improves and continues beyond one session.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
ctran/annotate_models
Annotate Rails classes with schema and routes info
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
firebase/firebase-tools
The Firebase Command Line Tools
MITOct 24, 2026 · metrics 2.10.0
PyPI · crates.io · npm
IBM/mcp-context-forge
An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems
crmne/ruby_llm
The Ruby AI framework.
MITOct 20, 2026 · metrics 2.10.0
Packagist
KnpLabs/snappy
PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Wrapper for wkhtmltopdf/wkhtmltoimage
MITOct 24, 2026 · metrics 2.10.0
Go · npm
improbable-eng/grpc-web
gRPC Web implementation for Golang and TypeScript
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
anc95/ChatGPT-CodeReview
🐥 A code review bot powered by ChatGPT
ISCOct 24, 2026 · metrics 2.10.0
Packagist · PyPI
php-imagine/Imagine
PHP Object Oriented image manipulation library
Custom licenseSep 16, 2026 · metrics 2.10.0
Packagist
spatie/laravel-query-builder
Easily build Eloquent queries from API requests
MITOct 24, 2026 · metrics 2.10.0
Go
jung-kurt/gofpdf
A PDF document generator with high level support for text, drawing and images
MITOct 18, 2026 · metrics 2.10.0
Packagist
overtrue/pinyin
🇨🇳 基于词库的中文转拼音优质解决方案
MITOct 4, 2026 · metrics 2.10.0
RubyGems
seyhunak/twitter-bootstrap-rails
Twitter Bootstrap for Rails 8
No licenseOct 24, 2026 · metrics 2.10.0
Maven
apache/shiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
leaferjs/leafer-ui
好用的 Canvas 引擎，轻松构建可交互、可编辑的图形应用，AI 时代的无限画布引擎。An easy-to-use Canvas engine for building interactive and editable graphics applications — an infinite canvas engine for the AI era.
MITOct 24, 2026 · metrics 2.10.0
crates.io
trifectatechfoundation/sudo-rs
A memory safe implementation of sudo and su.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI · npm
gptme/gptme
Your agent in your terminal, equipped with local tools: writes code, uses the terminal, browses the web. Make your own persistent autonomous agent on top!
MITOct 24, 2026 · metrics 2.10.0
PyPI
sqlalchemy/alembic
A database migrations tool for SQLAlchemy.
MITOct 24, 2026 · metrics 2.10.0