Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,618
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI · npm
pradyunsg/furo
A clean customizable documentation theme for Sphinx
MITSep 12, 2026 · metrics 2.10.0
PyPI
sdv-dev/SDV
Synthetic data generation for tabular data
Custom licenseOct 22, 2026 · metrics 2.10.0
RubyGems
thoughtbot/shoulda-matchers
Simple one-liner tests for common Rails functionality
MITSep 11, 2026 · metrics 2.10.0
crates.io
maciejhirsz/logos
Create ridiculously fast Lexers
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
google/recaptcha
PHP client library for reCAPTCHA, a free service to protect your website from spam and abuse.
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
—
Netflix/atlas
In-memory dimensional time series database.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
WordPress/Requests
Requests for PHP is a humble HTTP request library. It simplifies how you interact with other sites and takes away all your worries.
Custom licenseSep 16, 2026 · metrics 2.10.0
RubyGems
ViewComponent/view_component
A framework for building reusable, testable & encapsulated view components in Ruby on Rails.
MITSep 11, 2026 · metrics 2.10.0
PyPI
borb-pdf/borb
borb is a library for reading, creating and manipulating PDF files in python.
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
roidrage/lograge
An attempt to tame Rails' default policy to log everything.
MITSep 11, 2026 · metrics 2.10.0
npm
FirebaseExtended/reactfire
Hooks, Context Providers, and Components that make it easy to interact with Firebase.
MITOct 23, 2026 · metrics 2.10.0
PyPI
eliben/pycparser
:snake: Complete C99 parser in pure Python
Custom licenseSep 16, 2026 · metrics 2.10.0
RubyGems
lynndylanhurley/devise_token_auth
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
WTFPLSep 12, 2026 · metrics 2.10.0
Go
alecthomas/kingpin
CONTRIBUTIONS ONLY: A Go (golang) command line and flag parser
MITSep 12, 2026 · metrics 2.10.0
crates.io
graykode/abtop
Like htop, but for AI coding agents. Monitor Claude Code & Codex CLI sessions, tokens, context window, rate limits, and ports in real-time.
MITSep 20, 2026 · metrics 2.10.0
PyPI
yinkaisheng/Python-UIAutomation-for-Windows
🐍Python 3 wrapper of Microsoft UIAutomation. Support UIAutomation for MFC, WindowsForm, WPF, Modern UI(Metro UI), Qt, IE, Firefox, Chrome ...
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
symfony/framework-bundle
Provides a tight integration between Symfony components and the Symfony full-stack framework
MITSep 19, 2026 · metrics 2.10.0
PyPI
holoviz/datashader
Quickly and accurately render even the largest data.
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
microsoft/ebpf-for-windows
eBPF implementation that runs on top of Windows
MITSep 13, 2026 · metrics 2.10.0
npm
omgovich/react-colorful
🎨 A tiny (3,1 KB) color picker component for React and Preact apps
MITOct 24, 2026 · metrics 2.10.0
PyPI
truera/trulens
Evaluation and Tracking for LLM Experiments and AI Agents
MITSep 17, 2026 · metrics 2.10.0
Packagist
mcamara/laravel-localization
Easy localization for Laravel
MITSep 14, 2026 · metrics 2.10.0
—
Proxmark/proxmark3
Proxmark 3
GPL-2.0Oct 25, 2026 · metrics 2.10.0
crates.io · npm · Go +3
ashvardanian/StringZilla
Up to 100x faster strings for C, C++, CUDA, Python, Rust, Swift, JS, & Go, leveraging NEON, AVX2, AVX-512, SVE, GPGPU, & SWAR to accelerate search, hashing, sorting, edit distances, sketches, and memory ops 🦖
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
pytorch/text
Models, data loaders and abstractions for language processing, powered by PyTorch
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm · Maven
react-native-google-signin/google-signin
Google Sign-in for your React Native applications
MITSep 19, 2026 · metrics 2.10.0
npm
nicobailon/pi-subagents
Pi extension for async subagent delegation with truncation, artifacts, and session sharing
MITSep 13, 2026 · metrics 2.10.0
npm
vitaly-t/pg-promise
PostgreSQL interface for Node.js
MITSep 19, 2026 · metrics 2.10.0
Maven · npm
Loophole-LLC/Bastillion
Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI · npm
abhinavsingh/proxy.py
💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0