Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,434
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
googleapis/python-genai
Google Gen AI Python SDK provides an interface for developers to integrate Google's generative models into their Python applications.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
crates.io
nolabs-ai/nono
secure multiplexed execution paths for agents - zero trust, zero setup, zero latency.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
checkpoint-restore/criu
Checkpoint/Restore tool
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
civiccc/react-waypoint
A React component to execute a function whenever you scroll to an element.
MITOct 24, 2026 · metrics 2.10.0
Go · npm
dagucloud/dagu
Self-hostable workflow orchestrator for teams whose main work isn't orchestration. Declarative YAML over your scripts, SSH commands, containers, etc; keep workflows separate from business logic. One binary, no database, runs on limited H/W resources. Alternative to Airflow / Cron / Job Scheduler.
GPL-3.0Sep 20, 2026 · metrics 2.10.0
RubyGems
svenfuchs/rails-i18n
Repository for collecting Locale data for Ruby on Rails I18n as well as other interesting, Rails related I18n stuff
MITOct 24, 2026 · metrics 2.10.0
Go
roboll/helmfile
Deploy Kubernetes Helm Charts
MITOct 21, 2026 · metrics 2.10.0
crates.io
modelcontextprotocol/rust-sdk
The official Rust SDK for the Model Context Protocol
Custom licenseOct 20, 2026 · metrics 2.10.0
RubyGems
xcpretty/xcpretty
Flexible and fast xcodebuild formatter
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist
symfony/polyfill-ctype
Symfony polyfill for ctype functions
MITOct 20, 2026 · metrics 2.10.0
—
cifertech/ESP32-DIV
ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32
MITSep 16, 2026 · metrics 2.10.0
PyPI · Go · npm
bruin-data/ingestr
ingestr is a CLI tool to copy data between any databases with a single command seamlessly.
Custom licenseOct 24, 2026 · metrics 2.10.0
crates.io · npm · PyPI
rotki/rotki
A portfolio tracking, analytics, accounting and management application that protects your privacy
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
Packagist
symfony/dom-crawler
Eases DOM navigation for HTML and XML documents
MITOct 24, 2026 · metrics 2.10.0
PyPI
andialbrecht/sqlparse
A non-validating SQL parser module for Python
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
npm
hello-pangea/dnd
💅 Beautiful and accessible drag and drop for lists with React. ⭐️ Star to support our work!
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
rust-lang/regex
An implementation of regular expressions for Rust. This implementation uses finite automata and guarantees linear time matching on all inputs.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
cel-expr/cel-spec
Common Expression Language -- specification and binary representation
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go · npm
cshum/imagor
Fast, secure image processing server and Go library, using libvips
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
denoland/rusty_v8
Rust bindings for the V8 JavaScript engine
MITOct 20, 2026 · metrics 2.10.0
Packagist
stripe/stripe-php
PHP library for the Stripe API.
MITOct 20, 2026 · metrics 2.10.0
crates.io
petgraph/petgraph
Graph data structure library for Rust.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
slackapi/python-slack-sdk
Slack Developer Kit for Python
MITOct 24, 2026 · metrics 2.10.0
crates.io
ron-rs/ron
Rusty Object Notation
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
Harry-zklcdc/go-proxy-bingai
用 Vue3 和 Go 搭建的微软 New Bing 演示站点，拥有一致的 UI 体验，支持 ChatGPT 提示词，支持 API 调用，国内可用。
MITSep 19, 2026 · metrics 2.10.0
Go
kumahq/kuma
🐻 The multi-zone service mesh for containers, Kubernetes and VMs. Built with Envoy. CNCF Sandbox Project.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
alovajs/alova
The request strategy layer for JavaScript. 20+ ready-made strategies cut your request code by up to 70%
MITSep 16, 2026 · metrics 2.10.0
crates.io
maplibre/martin
Blazing fast and lightweight PostGIS, MBtiles and PMtiles tile server, tile generation, and mbtiles tooling.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
Nixtla/nixtla
TimeGPT-2.1: production ready pre-trained Time Series Foundation Model for forecasting and anomaly detection. Generative pretrained transformer for time series trained on over 100B data points. It's capable of accurately predicting various domains such as retail, electricity, finance, and IoT with just a few lines of code 🚀.
Custom licenseSep 18, 2026 · metrics 2.10.0
NuGet
ravendb/ravendb
ACID Document Database
Custom licenseOct 21, 2026 · metrics 2.10.0