Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,417
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
patriksimek/vm2
Advanced vm/sandbox for Node.js
MITOct 18, 2026 · metrics 2.10.0
—
f/textream
Textream is a free macOS teleprompter app for streamers, interviewers, and presenters. It highlights your script in real-time as you speak, displayed in a beautiful Dynamic Island overlay. With extensible features.
MITOct 22, 2026 · metrics 2.10.0
crates.io
briansmith/ring
An experiment.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
kentcdodds/match-sorter
Simple, expected, and deterministic best-match sorting of an array in JavaScript
MITSep 17, 2026 · metrics 2.10.0
PyPI
Pylons/pyramid
Pyramid - A Python web framework
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
Ombi-app/Ombi
Want a Movie or TV Show on Plex/Emby/Jellyfin? Use Ombi!
GPL-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
juhaku/utoipa
Simple, Fast, Code first and Compile time generated OpenAPI documentation for Rust
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
mvdan/gofumpt
A stricter gofmt
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
RubyGems
voormedia/rails-erd
Generate Entity-Relationship Diagrams for Rails applications
MITOct 24, 2026 · metrics 2.10.0
npm
prettier/prettier-eslint
Code :arrow_right: `prettier` :arrow_right: `eslint --fix` :arrow_right: Formatted Code :sparkles:
MITSep 19, 2026 · metrics 2.10.0
Go
AlecAivazis/survey
A golang library for building interactive and accessible prompts with full support for windows and posix terminals.
MITOct 21, 2026 · metrics 2.10.0
Maven
apache/tika
The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
jetty/jetty.project
Eclipse Jetty® - Web Container & Clients - supports HTTP/3, HTTP/2, HTTP/1, websocket, servlets, and more
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
firecow/gitlab-ci-local
Tired of pushing to test your .gitlab-ci.yml?
MITSep 26, 2026 · metrics 2.10.0
npm
s-yadav/react-number-format
React component to format numbers in an input or as a text.
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
microsoft/apm
Agent Package Manager
MITOct 20, 2026 · metrics 2.10.0
Go
google/go-containerregistry
Go library and CLIs for working with container registries
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm · crates.io
zvec-ai/zvec-grep
Local-first search across your workspace, built for humans and AI agents.
Apache-2.0Oct 15, 2026 · metrics 2.10.0
PyPI · crates.io
marcelroed/gigatoken
Language model tokenization at GB/s
MITSep 12, 2026 · metrics 2.10.0
PyPI
more-itertools/more-itertools
More routines for operating on iterables, beyond itertools
MITSep 16, 2026 · metrics 2.10.0
npm
crafter-station/petdex
A public gallery of animated pets for Codex, Claude Code, DeepSeek Harness, Hermes, OpenCode, Gemini CLI, and more.
MITSep 13, 2026 · metrics 2.10.0
PyPI
openagents-org/openagents
OpenAgents - The collaboration OS for AI agents
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
ben-manes/gradle-versions-plugin
Gradle plugin to discover dependency updates
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
LaravelCollective/html
HTML and Form Builders for the Laravel Framework
MITOct 20, 2026 · metrics 2.10.0
npm
draft-js-plugins/draft-js-plugins
React Plugin Architecture for Draft.js including Slack-Like Emojis, FB-Like Mentions and Stickers
MITOct 24, 2026 · metrics 2.10.0
npm
timgit/pg-boss
Queueing jobs in Postgres from Node.js like a boss
MITOct 24, 2026 · metrics 2.10.0
PyPI
urllib3/urllib3
urllib3 is a user-friendly HTTP client library for Python
MITOct 24, 2026 · metrics 2.10.0
PyPI
uxlfoundation/oneDNN
Open-source library of optimized deep learning operations (matmul, convolution, attention) for CPUs (x64, AArch64, RISC-V) and Intel GPUs. Used by PyTorch, TensorFlow, OpenVINO, and ONNX Runtime.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven
corda/corda
Corda is an open source blockchain project, designed for business from the start. Only Corda allows you to build interoperable blockchain networks that transact in strict privacy. Corda's smart contract technology allows businesses to transact directly, with value.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
cenkalti/backoff
⏱ The exponential backoff algorithm in Go
MITSep 19, 2026 · metrics 2.10.0