Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,573
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
aws/aws-lambda-rust-runtime
A Rust runtime for AWS Lambda
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist · npm
craftcms/cms
Build bespoke content experiences with Craft.
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
jsx-eslint/eslint-plugin-jsx-a11y
Static AST checker for a11y rules on JSX elements.
MITSep 17, 2026 · metrics 2.10.0
PyPI
kennethreitz/responder
A familiar HTTP Service Framework for Python.
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI
pytorch/rl
A modular, primitive-first, python-first PyTorch library for Reinforcement Learning.
MITOct 22, 2026 · metrics 2.10.0
npm
unjs/unplugin
Unified plugin system for Vite, Rollup, Webpack, esbuild, Rolldown, and more
MITSep 17, 2026 · metrics 2.10.0
NuGet
mini-software/MiniExcel
Lightweight, fast and simple cross-platform processing tool for importing and exporting spreadsheet documents.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go · npm
ory/oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
LLOneBot/LuckyLilliaBot
支持 OneBot 11、Satori 和 Milky 协议
GPL-2.0Sep 13, 2026 · metrics 2.10.0
—
icedland/iced
Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua
MITOct 23, 2026 · metrics 2.10.0
PyPI
schemathesis/schemathesis
Catch API bugs before your users do
MITSep 16, 2026 · metrics 2.10.0
Maven · RubyGems
unicode-org/icu
The home of the ICU project source code.
Custom licenseSep 14, 2026 · metrics 2.10.0
—
Haivision/srt
Secure, Reliable, Transport
MPL-2.0Sep 14, 2026 · metrics 2.10.0
Go
golang/glog
Leveled execution logs for Go
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI · npm
meta-pytorch/botorch
Bayesian optimization in PyTorch
MITSep 14, 2026 · metrics 2.10.0
npm
mathiasbynens/he
A robust HTML entity encoder/decoder written in JavaScript.
MITSep 16, 2026 · metrics 2.10.0
PyPI
vispy/vispy
Main repository for Vispy
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
wevm/viem
TypeScript Interface for Ethereum
Custom licenseOct 24, 2026 · metrics 2.10.0
Go · Packagist
dunglas/vulcain
🔨 Fast and idiomatic client-driven REST APIs.
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
npm
tildeio/rsvp.js
A lightweight library that provides tools for organizing asynchronous code
MITSep 17, 2026 · metrics 2.10.0
npm
dalibo/pev2
Postgres Explain Visualizer 2
PostgreSQLSep 13, 2026 · metrics 2.10.0
Go · PyPI
grafana/mcp-grafana
MCP server for Grafana
Apache-2.0Oct 22, 2026 · metrics 2.10.0
—
joernio/joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
pyserial/pyserial
Python serial port access library
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
animir/node-rate-limiter-flexible
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
ISCSep 17, 2026 · metrics 2.10.0
npm
histoire-dev/histoire
⚡ Fast and beautiful interactive component playgrounds, powered by Vite
MITOct 22, 2026 · metrics 2.10.0
Go · npm · PyPI
argoproj/argo-rollouts
Progressive Delivery for Kubernetes
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI · npm
pradyunsg/furo
A clean customizable documentation theme for Sphinx
MITSep 12, 2026 · metrics 2.10.0
PyPI
sdv-dev/SDV
Synthetic data generation for tabular data
Custom licenseOct 22, 2026 · metrics 2.10.0
RubyGems
thoughtbot/shoulda-matchers
Simple one-liner tests for common Rails functionality
MITSep 11, 2026 · metrics 2.10.0