Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,403
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
clean-css/clean-css
Fast and efficient CSS optimizer for node.js and the Web
MITSep 17, 2026 · metrics 2.10.0
NuGet · npm
riok/mapperly
A .NET source generator for generating object mappings. No runtime reflection.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
router-for-me/Cli-Proxy-API-Management-Center
This is a WebUI interface based on CLI-Proxy-API, designed to simplify configuration modifications and runtime status monitoring.
MITSep 12, 2026 · metrics 2.10.0
crates.io · PyPI
crate-ci/typos
Source code spell checker
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
mbloch/mapshaper
Tools for editing Shapefile, GeoJSON, TopoJSON and CSV files
Custom licenseOct 24, 2026 · metrics 2.10.0
NuGet
cake-build/cake
:cake: Cake (C# Make) is a cross platform build automation system.
MITSep 15, 2026 · metrics 2.10.0
PyPI · npm
mandiant/flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Apache-2.0Oct 16, 2026 · metrics 2.10.0
PyPI
msgspec/msgspec
A fast serialization and validation library, with builtin support for JSON, MessagePack, YAML, and TOML
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
crates.io
flox/flox
The Deterministic Foundation for your SDLC
GPL-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
google-deepmind/mujoco_menagerie
A collection of high-quality models for the MuJoCo physics engine, curated by Google DeepMind.
Custom licenseOct 13, 2026 · metrics 2.10.0
Packagist · npm
laravel/horizon
Dashboard and code-driven configuration for Laravel queues.
MITOct 24, 2026 · metrics 2.10.0
npm
RetireJS/retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Apache-2.0Sep 21, 2026 · metrics 2.10.0
npm · PyPI
dataelement/Clawith
Your First AI Agents Company
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI
rapidfuzz/RapidFuzz
Rapid fuzzy string matching in Python using various string metrics
MITOct 24, 2026 · metrics 2.10.0
NuGet
OpenTabletDriver/OpenTabletDriver
Open source, cross-platform, user-mode tablet driver
LGPL-3.0Oct 14, 2026 · metrics 2.10.0
PyPI
zeromq/pyzmq
PyZMQ: Python bindings for zeromq
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
crates.io · npm
moonrepo/moon
A build system and monorepo management tool for the web ecosystem, written in Rust.
MITOct 24, 2026 · metrics 2.10.0
Maven
powermock/powermock
PowerMock is a Java framework that allows you to unit test code normally regarded as untestable.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
cosmiconfig/cosmiconfig
Find and load configuration from a package.json property, rc file, TypeScript module, and more!
MITSep 30, 2026 · metrics 2.10.0
Packagist
symfony/dependency-injection
Allows you to standardize and centralize the way objects are constructed in your application
MITSep 19, 2026 · metrics 2.10.0
Maven
square/kotlinpoet
A Kotlin API for generating .kt source files.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
google/btree
BTree provides a simple, ordered, in-memory data structure for Go programs.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
crates.io · PyPI
xiph/rav1e
The fastest and safest AV1 encoder.
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
RubyGems
JohnSnowLabs/spark-nlp
State of the Art Natural Language Processing
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
bingoogolapple/BGABanner-Android
引导界面滑动导航 + 大于等于1页时无限轮播 + 各种切换动画轮播效果
No licenseSep 19, 2026 · metrics 2.10.0
Packagist
symfony/cache
Provides extended PSR-6, PSR-16 (and tags) implementations
MITOct 24, 2026 · metrics 2.10.0
RubyGems
zdennis/activerecord-import
A library for bulk insertion of data into your database using ActiveRecord.
MITOct 24, 2026 · metrics 2.10.0
Go
donknap/dpanel
轻量化 docker 可视化管理面板。lightweight panel for docker
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
nodeca/pica
Resize image in browser with high quality and high speed
MITSep 18, 2026 · metrics 2.10.0
Go
yusing/godoxy
High-performance reverse proxy and container orchestrator for self-hosters
Custom licenseSep 14, 2026 · metrics 2.10.0