Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,330
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
novnc/websockify
Websockify is a WebSocket to TCP proxy/bridge. This allows a browser to connect to any application/server/service.
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
crates.io
salvo-rs/salvo
A powerful web framework built with a simplified design.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
CLIUtils/CLI11
CLI11 is a command line parser for C++11 and beyond that provides a rich feature set with a simple and intuitive interface.
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
igrigorik/videospeed
HTML5 video speed controller (for Google Chrome)
MITOct 6, 2026 · metrics 2.10.0
NuGet · npm
Cysharp/MagicOnion
Unified Realtime/API framework for .NET platform and Unity.
MITSep 15, 2026 · metrics 2.10.0
Go
nicholas-fedor/watchtower
Automate Docker container image updates
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
facebook/prop-types
Runtime type checking for React props and similar objects
MITSep 16, 2026 · metrics 2.10.0
npm
vanjs-org/van
🍦 VanJS: World's smallest reactive UI framework. Incredibly Powerful, Insanely Small - Everyone can build a useful UI app in an hour.
MITOct 24, 2026 · metrics 2.10.0
Go
alireza0/x-ui
xray panel supporting multi-protocol multi-user expire day & traffic & IP-Limit (Vmess & Vless & Trojan & Shadowsocks & Hysteria)
GPL-3.0Oct 24, 2026 · metrics 2.10.0
PyPI
tensorflow/probability
Probabilistic reasoning and statistical analysis in TensorFlow
Apache-2.0Oct 24, 2026 · metrics 2.10.0
NuGet · npm
dotnet/docfx
Static site generator for .NET API documentation.
MITOct 24, 2026 · metrics 2.10.0
crates.io
linebender/vello
A GPU compute-centric 2D renderer.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
openziti/ziti
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
zan8in/afrog
A Security Tool for Bug Bounty, Pentest and Red Teaming.
MITOct 24, 2026 · metrics 2.10.0
Maven
square/wire
gRPC and protocol buffers for Android, Kotlin, Swift and Java.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
robinebers/openusage
Burning through your subscriptions too fast? Paying for stuff you never use? Stop guessing. OpenUsage is free and open source.
MITOct 25, 2026 · metrics 2.10.0
npm
pieroxy/lz-string
LZ-based compression algorithm for JavaScript
MITSep 17, 2026 · metrics 2.10.0
PyPI
matplotlib/mplfinance
Financial Markets Data Visualization using Matplotlib
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
saltyshiomix/nextron
⚡ Next.js + Electron ⚡
MITSep 20, 2026 · metrics 2.10.0
Packagist
amphp/amp
A non-blocking concurrency framework for PHP applications. 🐘
MITOct 24, 2026 · metrics 2.10.0
Maven
alibaba/fastjson2
🚄 FASTJSON2 is a Java JSON library with excellent performance.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
archtechx/tenancy
Automatic multi-tenancy for Laravel. No code changes needed.
MITOct 24, 2026 · metrics 2.10.0
PyPI · npm
jupyterlab/jupyter-ai
An open source extension that connects AI agents to computational notebooks in JupyterLab.
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
RubyGems
rails/jbuilder
Jbuilder: generate JSON objects with a Builder-style DSL
MITOct 24, 2026 · metrics 2.10.0
PyPI
pyqtgraph/pyqtgraph
Fast data visualization and GUI tools for scientific / engineering applications
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
trunk-rs/trunk
Build, bundle & ship your Rust WASM application to the web.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
vuejs/create-vue
🛠️ The recommended way to start a Vite-powered Vue project
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI · crates.io
onnxsim/onnxsim
Simplify your onnx model
Apache-2.0Sep 18, 2026 · metrics 2.10.0
NuGet
dotnetcore/FreeSql
.NET aot orm, VB.NET/C# orm, Mysql/PostgreSQL/SqlServer/Oracle orm, Sqlite/Firebird/Clickhouse/DuckDB orm, 达梦/金仓/虚谷/翰高/高斯 orm, 神通 orm, 南大通用 orm, 国产 orm, TDengine orm, QuestDB orm, MsAccess orm.
MITOct 24, 2026 · metrics 2.10.0
—
canonical/dqlite
Embeddable, replicated and fault-tolerant SQL engine.
Custom licenseOct 18, 2026 · metrics 2.10.0