Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,489
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
dromara/liteflow
Lightweight, fast, stable, programmable component-based rule engine — where AI Agents orchestrate just like ordinary components. Uniquely designed DSL: component reuse, sync/async & dynamic orchestration, multi-language scripting, nested rules, hot deployment and smooth refresh. If you can orchestrate LiteFlow, you can orchestrate AI.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
Limine-Bootloader/Limine
Modern, secure, portable, multiprotocol bootloader and boot manager.
BSD-2-ClauseOct 22, 2026 · metrics 2.10.0
PyPI
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
PyPI
JohannesBuchner/imagehash
A Python Perceptual Image Hashing Module
BSD-2-ClauseOct 24, 2026 · metrics 2.10.0
Packagist
hhxsv5/laravel-s
LaravelS is an out-of-the-box adapter between Laravel/Lumen and Swoole.
MITSep 11, 2026 · metrics 2.10.0
Packagist
pimcore/pimcore
Core Framework for the Open Core Data & Experience Management Platform (PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce)
Custom licenseOct 20, 2026 · metrics 2.10.0
npm · Packagist
moment/moment-timezone
Timezone support for moment.js
MITSep 16, 2026 · metrics 2.10.0
npm
openstreetmap/iD
🆔 The easy-to-use OpenStreetMap editor in JavaScript.
ISCSep 18, 2026 · metrics 2.10.0
RubyGems
stefankroes/ancestry
Organise ActiveRecord model into a tree structure
MITSep 12, 2026 · metrics 2.10.0
Packagist
defuse/php-encryption
Simple Encryption in PHP.
MITOct 24, 2026 · metrics 2.10.0
—
nestybox/sysbox
An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
JCTools/JCTools
No repository description published.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
dongrixinyu/JioNLP
中文 NLP 预处理、解析工具包，准确、高效、易用 A Chinese NLP Preprocessing & Parsing Package www.jionlp.com
Apache-2.0Oct 16, 2026 · metrics 2.10.0
—
nextcloud/desktop
💻 Desktop sync client for Nextcloud
GPL-2.0Sep 19, 2026 · metrics 2.10.0
npm
AsyncBanana/microdiff
A fast, zero dependency object and array comparison library. Significantly faster than most other deep comparison libraries and has full TypeScript support.
MITSep 15, 2026 · metrics 2.10.0
—
chipsalliance/rocket-chip
Rocket Chip Generator
Custom licenseSep 25, 2026 · metrics 2.10.0
PyPI
rlabbe/filterpy
Python Kalman filtering and optimal estimation library. Implements Kalman filter, particle filter, Extended Kalman filter, Unscented Kalman filter, g-h (alpha-beta), least squares, H Infinity, smoothers, and more. Has companion book 'Kalman and Bayesian Filters in Python'.
MITSep 17, 2026 · metrics 2.10.0
RubyGems
celluloid/celluloid
Actor-based concurrent object framework for Ruby
MITSep 12, 2026 · metrics 2.10.0
PyPI
elastic/elasticsearch-dsl-py
High level Python client for Elasticsearch
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Maven · RubyGems
TNG/ArchUnit
A Java architecture test library, to specify and assert architecture rules in plain Java
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io · npm
golutra/golutra
Multi-agent AI orchestration platform for automation, workflows, and developer tools. Golutra transforms Codex, Claude Code, and OpenClaw into a unified agent system with parallel execution, task orchestration, long-running workflows, and AI productivity workspace.
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
webpack/tapable
Just a little module for plugins.
MITSep 16, 2026 · metrics 2.10.0
Maven
ballerina-platform/ballerina-lang
The Ballerina Programming Language
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
steveukx/git-js
A light weight interface for running git commands in any node.js application.
MITSep 17, 2026 · metrics 2.10.0
NuGet
nathanhoad/godot_dialogue_manager
A powerful nonlinear dialogue system for Godot
MITSep 15, 2026 · metrics 2.10.0
—
sjtug/SJTUThesis
上海交通大学 LaTeX 论文模板 | Shanghai Jiao Tong University LaTeX Thesis Template
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
kube-rs/kube
Rust Kubernetes client and controller runtime
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
amqp-node/amqplib
AMQP 0-9-1 library and client for Node.JS
Custom licenseSep 17, 2026 · metrics 2.10.0
Go · npm
tutti-os/tutti
Where people and agents build in tune.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
cilium/pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
Apache-2.0Oct 22, 2026 · metrics 2.10.0