Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,380
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
jMonkeyEngine/jmonkeyengine
A complete 3-D game development suite written in Java.
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
crates.io
Keats/tera
A template engine for Rust based on Jinja2/Django
MITOct 24, 2026 · metrics 2.10.0
npm
bramstein/fontfaceobserver
Webfont loading. Simple, small, and efficient.
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
jazzband/djangorestframework-simplejwt
A JSON Web Token authentication plugin for the Django REST Framework.
MITOct 24, 2026 · metrics 2.10.0
PyPI
privacyguides/privacyguides.org
Protect your data against global mass surveillance programs.
CC-BY-SA-4.0Oct 24, 2026 · metrics 2.10.0
Go · PyPI
kubernetes-sigs/aws-load-balancer-controller
A Kubernetes controller for Elastic Load Balancers
Apache-2.0Sep 21, 2026 · metrics 2.10.0
npm
sindresorhus/file-type
Detect the file type of a file, stream, or data
MITSep 17, 2026 · metrics 2.10.0
PyPI · Go · npm
SwanHubX/SwanLab
⚡️SwanLab - an open-source, modern-design AI training tracking and visualization tool. Supports Cloud / Self-hosted use. Integrated with PyTorch / Transformers / verl / LLaMA Factory / ms-swift / Ultralytics / MMEngine / Keras etc.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
rocky/python-uncompyle6
A cross-version Python bytecode decompiler
GPL-3.0Sep 17, 2026 · metrics 2.10.0
crates.io
rust-ndarray/ndarray
ndarray: an N-dimensional array with array views, multidimensional slicing, and efficient operations
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
webpack/css-loader
CSS Loader
MITSep 17, 2026 · metrics 2.10.0
Packagist · npm
tighten/ziggy
Use your Laravel routes in JavaScript.
MITSep 18, 2026 · metrics 2.10.0
Packagist
phpro/grumphp
A PHP code-quality tool
MITOct 24, 2026 · metrics 2.10.0
Packagist · npm
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
MITOct 24, 2026 · metrics 2.10.0
Packagist · npm
LycheeOrg/Lychee
A great looking and easy-to-use photo-management-system you can run on your server, to manage and share photos.
MITOct 24, 2026 · metrics 2.10.0
PyPI
pallets-eco/flask-sqlalchemy
Adds SQLAlchemy support to Flask
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
PyPI
rytilahti/python-miio
Python library & console tool for controlling Xiaomi smart appliances
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Packagist · npm
abraham/twitteroauth
The most popular PHP library for use with the Twitter OAuth REST API.
MITOct 24, 2026 · metrics 2.10.0
Packagist
doctrine/DoctrineMigrationsBundle
Symfony integration for the doctrine/migrations library
MITOct 24, 2026 · metrics 2.10.0
PyPI
speedyapply/JobSpy
Jobs scraper library for LinkedIn, Indeed, Glassdoor, Google, ZipRecruiter & more
MITSep 17, 2026 · metrics 2.10.0
npm
vercel-labs/just-bash
Bash for Agents
No licenseSep 21, 2026 · metrics 2.10.0
crates.io
tower-rs/tower
async fn(Request) -> Result<Response, Error>
MITSep 16, 2026 · metrics 2.10.0
npm
adaltas/node-csv
Full featured CSV parser with simple api and tested against large datasets.
MITSep 17, 2026 · metrics 2.10.0
PyPI
ktbyers/netmiko
Multi-vendor library to simplify Paramiko SSH connections to network devices
MITSep 16, 2026 · metrics 2.10.0
—
riverwm/river
[mirror] A non-monolithic Wayland compositor
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
zpao/qrcode.react
A <QRCode/> component for use with React.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
antfu-collective/taze
🥦 A modern cli tool that keeps your deps fresh
MITSep 18, 2026 · metrics 2.10.0
PyPI
ssut/py-googletrans
(unofficial) Googletrans: Free and Unlimited Google translate API for Python. Translates totally free of charge.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
eventmachine/eventmachine
EventMachine: fast, simple event-processing library for Ruby programs
Custom licenseOct 24, 2026 · metrics 2.10.0
Go
rs/xid
xid is a globally unique id generator thought for the web
MITOct 24, 2026 · metrics 2.10.0