Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,523
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
inokawa/virtua
A zero-config, fast and small virtual list and grid component for React, Vue, Solid, Svelte and Angular.
MITSep 17, 2026 · metrics 2.10.0
crates.io
sozu-proxy/sozu
Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
webrtcHacks/adapter
Shim to insulate apps from spec changes and prefix differences. Latest adapter.js release:
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
flasgger/flasgger
Easy OpenAPI specs and Swagger UI for your Flask API
MITSep 12, 2026 · metrics 2.10.0
NuGet
npgsql/npgsql
Npgsql is the .NET data provider for PostgreSQL.
PostgreSQLOct 23, 2026 · metrics 2.10.0
RubyGems
solnic/virtus
[DISCONTINUED ] Attributes on Steroids for Plain Old Ruby Objects
MITSep 12, 2026 · metrics 2.10.0
Maven
modelcontextprotocol/java-sdk
The official Java SDK for Model Context Protocol servers and clients. Maintained in collaboration with Spring AI
MITOct 19, 2026 · metrics 2.10.0
Go
go-gorp/gorp
Go Relational Persistence - an ORM-ish library for Go
MITOct 21, 2026 · metrics 2.10.0
npm
kach/nearley
📜🔜🌲 Simple, fast, powerful parser toolkit for JavaScript.
MITSep 17, 2026 · metrics 2.10.0
npm
FortAwesome/react-fontawesome
Official React Component for Font Awesome Icons
MITOct 24, 2026 · metrics 2.10.0
crates.io
google/tarpc
An RPC framework for Rust with a focus on ease of use.
MITSep 18, 2026 · metrics 2.10.0
Packagist
mevdschee/php-crud-api
Single file PHP script that adds a REST API to a SQL database
MITSep 12, 2026 · metrics 2.10.0
PyPI
stack-of-tasks/pinocchio
A fast and flexible implementation of Rigid Body Dynamics algorithms and their analytical derivatives
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
Go
charmbracelet/glamour
Stylesheet-based markdown rendering for your CLI apps 💇🏻♀️
MITOct 21, 2026 · metrics 2.10.0
npm
livestorejs/livestore
LiveStore is a next-generation state management framework based on reactive SQLite and built-in sync engine.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
crates.io
psmux/psmux
Tmux on Windows Powershell - tmux for PowerShell, Windows Terminal, cmd.exe. Includes psmux, pmux, and tmux commands. This is native High-Performance Tmux designed for Windows in Rust 🦀
MITOct 24, 2026 · metrics 2.10.0
Maven
springdoc/springdoc-openapi
Library for OpenAPI 3 with spring-boot
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
urchade/GLiNER
Generalist and Lightweight Model for Named Entity Recognition (Extract any entity types from texts)
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
cheggaaa/pb
Console progress bar for Golang
BSD-3-ClauseOct 25, 2026 · metrics 2.10.0
Maven · RubyGems
element-hq/element-android
A Matrix collaboration client for Android.
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
npm · Maven · RubyGems
software-mansion/react-native-screens
Native navigation primitives for your React Native app.
MITSep 17, 2026 · metrics 2.10.0
PyPI
GeneralMills/pytrends
Pseudo API for Google Trends
Custom licenseSep 17, 2026 · metrics 2.10.0
NuGet
StephenCleary/AsyncEx
A helper library for async/await.
MITSep 12, 2026 · metrics 2.10.0
npm · crates.io
mozilla/source-map
Consume and generate source maps.
Custom licenseSep 16, 2026 · metrics 2.10.0
—
thunderclient/thunder-client-support
Thunder Client is a lightweight Rest API Client Extension for VS Code.
Custom licenseSep 15, 2026 · metrics 2.10.0
NuGet
Tyrrrz/YoutubeExplode
Abstraction layer over YouTube's internal API
MITSep 11, 2026 · metrics 2.10.0
—
blackmagic-debug/blackmagic
In-application debugger for ARM Cortex and RISC-V processors.
GPL-3.0Oct 25, 2026 · metrics 2.10.0
Go · npm · PyPI
kagent-dev/kagent
Cloud Native Agentic AI | Discord: https://bit.ly/kagentdiscord
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
microcosm-cc/bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
NuGet
martinothamar/Mediator
A high performance implementation of Mediator pattern in .NET using source generators.
MITSep 11, 2026 · metrics 2.10.0