Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,511
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
lightly-ai/lightly
A python library for self-supervised learning on images.
MITSep 17, 2026 · metrics 2.10.0
PyPI
realiti4/claude-swap
Switch between multiple Claude Code accounts, with automatic rate-limit rotation, usage dashboard, and parallel sessions
MITOct 22, 2026 · metrics 2.10.0
PyPI
FactoryBoy/factory_boy
A test fixtures replacement for Python
MITOct 24, 2026 · metrics 2.10.0
npm · Maven
Atmosphere/atmosphere
Portable AI agent runtime for the JVM. One @Agent class runs on Spring AI, LangChain4j, Anthropic, or 9 more behind one SPI. Token streaming, tool calls, human approvals, and governance over WebSocket, SSE, gRPC, or WebTransport/HTTP3. Speaks MCP, A2A, and AG-UI.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI · npm
mckinsey/vizro
Vizro is a low-code toolkit for building high-quality data visualization apps.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
pyvista/pyvista
3D visualization and mesh analysis for science and engineering
MITSep 12, 2026 · metrics 2.10.0
npm · crates.io · PyPI
edwardkim/rhwp
아래한글 hwp viewer and editor by rust and wasm
MITSep 13, 2026 · metrics 2.10.0
npm
parse-community/parse-dashboard
A dashboard for managing Parse Server
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems · npm
sorbet/sorbet
A fast, powerful type checker designed for Ruby
Apache-2.0Oct 25, 2026 · metrics 2.10.0
Packagist
lazychaser/laravel-nestedset
Effective tree structures in Laravel 4-8
No licenseSep 18, 2026 · metrics 2.10.0
npm
nodejs/corepack
Package manager version manager for Node.js projects
MITSep 17, 2026 · metrics 2.10.0
Go
aws/aws-lambda-go
Libraries, samples and tools to help Go developers develop AWS Lambda functions.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
unplugin/unplugin-auto-import
Auto import APIs on-demand for Vite, Webpack and Rollup
MITOct 3, 2026 · metrics 2.10.0
PyPI
nalepae/pandarallel
A simple and efficient tool to parallelize Pandas operations on all available CPUs
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
dcodeIO/bcrypt.js
Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support.
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
tartley/colorama
Simple cross-platform colored terminal text in Python
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm · crates.io
umijs/dumi
📖 Static Site Generator for component library development
MITOct 20, 2026 · metrics 2.10.0
NuGet
SciSharp/LLamaSharp
A C#/.NET library to run LLM (🦙LLaMA/LLaVA) on your local device efficiently.
MITSep 11, 2026 · metrics 2.10.0
PyPI
JJTech0130/pypush
Python APNs and iMessage client
Custom licenseOct 25, 2026 · metrics 2.10.0
npm · Maven
JetBrains/ring-ui
A collection of JetBrains Web UI components
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
symfony/dotenv
Registers environment variables from a .env file
MITOct 24, 2026 · metrics 2.10.0
Go
OffchainLabs/prysm
Go implementation of Ethereum proof of stake
GPL-3.0Oct 23, 2026 · metrics 2.10.0
Packagist · npm
wp-graphql/wp-graphql
:rocket: GraphQL API for WordPress
GPL-3.0Sep 15, 2026 · metrics 2.10.0
npm · Maven
apache/cordova-android
Apache Cordova Android
Apache-2.0Sep 14, 2026 · metrics 2.10.0
—
KhronosGroup/Vulkan-Hpp
Open-Source Vulkan C++ API
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
css/csso
CSS minifier with structural optimizations
MITSep 16, 2026 · metrics 2.10.0
npm
grammyjs/grammY
The Telegram Bot Framework.
MITOct 24, 2026 · metrics 2.10.0
PyPI
vllm-project/llm-compressor
Transformers-compatible library for applying various compression algorithms to LLMs for optimized deployment with vLLM
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Packagist
ralouphie/getallheaders
PHP getallheaders polyfill
MITOct 24, 2026 · metrics 2.10.0
Go
spegel-org/spegel
Stateless cluster local OCI registry mirror.
MITSep 11, 2026 · metrics 2.10.0