Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,348
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
NuGet
dotnetcore/FreeSql
.NET aot orm, VB.NET/C# orm, Mysql/PostgreSQL/SqlServer/Oracle orm, Sqlite/Firebird/Clickhouse/DuckDB orm, 达梦/金仓/虚谷/翰高/高斯 orm, 神通 orm, 南大通用 orm, 国产 orm, TDengine orm, QuestDB orm, MsAccess orm.
MITOct 24, 2026 · metrics 2.10.0
—
canonical/dqlite
Embeddable, replicated and fault-tolerant SQL engine.
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
DistrictDataLabs/yellowbrick
Visual analysis and diagnostic tools to facilitate machine learning model selection.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Hex
absinthe-graphql/absinthe
The GraphQL toolkit for Elixir
Custom licenseOct 24, 2026 · metrics 2.10.0
Go · npm · RubyGems
bitmagnet-io/bitmagnet
A self-hosted BitTorrent indexer, DHT crawler, content classifier and torrent search engine with web UI, GraphQL API and Servarr stack integration.
MITOct 12, 2026 · metrics 2.10.0
npm
microsoft/flint-chart
🪄 Flint is a visualization language that lets AI agents reliably create expressive, good-looking charts from simple, human-editable chart specs.
MITOct 22, 2026 · metrics 2.10.0
crates.io
rusqlite/rusqlite
Ergonomic bindings to SQLite for Rust
MITSep 17, 2026 · metrics 2.10.0
PyPI
meta-llama/PurpleLlama
Set of tools to assess and improve LLM security.
Custom licenseSep 17, 2026 · metrics 2.10.0
NuGet
microsoft/ApplicationInspector
A source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.
MITOct 24, 2026 · metrics 2.10.0
npm · Maven · RubyGems
microsoft/react-native-macos
A framework for building native macOS apps with React.
MITOct 24, 2026 · metrics 2.10.0
Maven · npm · RubyGems
rainbow-me/rainbow
🌈‒ the Ethereum wallet that lives in your pocket
GPL-3.0Oct 24, 2026 · metrics 2.10.0
—
libffi/libffi
A portable foreign-function interface library.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI · npm
microsoft/FLAML
A fast library for AutoML and tuning. Join our Discord: https://discord.gg/Cppx2vSPVP.
MITSep 17, 2026 · metrics 2.10.0
PyPI
joblib/joblib
Computing with Python functions.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
elastic/elasticsearch-py
Official Python client for Elasticsearch
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
graphql-python/graphene-django
Build powerful, efficient, and flexible GraphQL APIs with seamless Django integration.
MITSep 17, 2026 · metrics 2.10.0
npm
sidorares/node-mysql2
:zap: fast mysqljs/mysql compatible mysql driver for node.js
MITOct 23, 2026 · metrics 2.10.0
PyPI
jeffkaufman/icdiff
improved colored diff
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
wookayin/gpustat
📊 A simple command-line utility for querying and monitoring GPU status
MITOct 24, 2026 · metrics 2.10.0
npm
OHIF/Viewers
OHIF zero-footprint DICOM viewer and oncology specific Lesion Tracker, plus shared extension packages
MITOct 24, 2026 · metrics 2.10.0
PyPI
prometheus/client_python
Prometheus instrumentation library for Python applications
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
algolia/docsearch
:blue_book: The easiest way to add search to your documentation.
MITOct 23, 2026 · metrics 2.10.0
Packagist · npm
php-debugbar/php-debugbar
Debug bar for PHP
MITOct 24, 2026 · metrics 2.10.0
Maven · npm
yuzutech/kroki
Creates diagrams from textual descriptions!
MITOct 24, 2026 · metrics 2.10.0
npm · Maven · RubyGems
zoontek/react-native-permissions
An unified permissions API for React Native on iOS, Android and Windows.
MITSep 15, 2026 · metrics 2.10.0
PyPI
open-webui/mcpo
A simple, secure MCP-to-OpenAPI proxy server
MITSep 17, 2026 · metrics 2.10.0
NuGet · npm
radzenhq/radzen-blazor
Radzen Blazor is the most sophisticated free UI component library for Blazor, featuring 145+ native components including DataGrid, Scheduler, Charts, and advanced theming with full support for Material Design and Fluent UI. If Radzen Blazor is useful to you, a ⭐ on GitHub helps other Blazor developers find it.
MITOct 24, 2026 · metrics 2.10.0
npm
dmno-dev/varlock
AI-safe .env files: Schemas for agents, Secrets for humans.
MITSep 11, 2026 · metrics 2.10.0
—
Xabaril/AspNetCore.Diagnostics.HealthChecks
Enterprise HealthChecks for ASP.NET Core Diagnostics Package
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
GDRETools/gdsdecomp
Godot reverse engineering tools
MITOct 24, 2026 · metrics 2.10.0