Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,333
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
dromara/liteflow
Lightweight, fast, stable, programmable component-based rule engine — where AI Agents orchestrate just like ordinary components. Uniquely designed DSL: component reuse, sync/async & dynamic orchestration, multi-language scripting, nested rules, hot deployment and smooth refresh. If you can orchestrate LiteFlow, you can orchestrate AI.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
Limine-Bootloader/Limine
Modern, secure, portable, multiprotocol bootloader and boot manager.
BSD-2-ClauseOct 22, 2026 · metrics 2.10.0
Packagist
pimcore/pimcore
Core Framework for the Open Core Data & Experience Management Platform (PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce)
Custom licenseOct 20, 2026 · metrics 2.10.0
Maven · RubyGems
TNG/ArchUnit
A Java architecture test library, to specify and assert architecture rules in plain Java
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go · npm
tutti-os/tutti
Where people and agents build in tune.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
cilium/pwru
Packet, where are you? -- eBPF-based Linux kernel networking debugger
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
symfony/yaml
Loads and dumps YAML files
MITOct 20, 2026 · metrics 2.10.0
npm
ReactTooltip/react-tooltip
React Tooltip Component
MITOct 20, 2026 · metrics 2.10.0
npm
fern-api/fern
Input OpenAPI. Output SDKs and Docs.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Maven · PyPI
Kotlin/dokka
API documentation engine for Kotlin
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
itchyny/gojq
Pure Go implementation of jq
MITOct 21, 2026 · metrics 2.10.0
NuGet · npm · RubyGems
fluentassertions/fluentassertions
A very extensive set of extension methods that allow you to more naturally specify the expected outcome of a TDD or BDD-style unit tests. Targets .NET Framework 4.7, as well as .NET Core 2.1, .NET Core 3.0, .NET 6, .NET Standard 2.0 and 2.1. Supports the unit test frameworks MSTest2, NUnit3, XUnit2, MSpec, and NSpec3.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
realiti4/claude-swap
Switch between multiple Claude Code accounts, with automatic rate-limit rotation, usage dashboard, and parallel sessions
MITOct 22, 2026 · metrics 2.10.0
PyPI · npm
mckinsey/vizro
Vizro is a low-code toolkit for building high-quality data visualization apps.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · crates.io
umijs/dumi
📖 Static Site Generator for component library development
MITOct 20, 2026 · metrics 2.10.0
Go
OffchainLabs/prysm
Go implementation of Ethereum proof of stake
GPL-3.0Oct 23, 2026 · metrics 2.10.0
npm
spite/ccapture.js
A library to capture canvas-based animations at a fixed framerate
MITOct 20, 2026 · metrics 2.10.0
PyPI
octodns/octodns
Tools for managing DNS across multiple providers
MITOct 19, 2026 · metrics 2.10.0
Maven · npm
DataLinkDC/dinky
Dinky is a real-time data development platform based on Apache Flink, enabling agile data development, deployment and operation.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
dembrandt/dembrandt
Extract any website’s design system into tokens in seconds: logo, colors, typography, borders & more. One command.
MITOct 21, 2026 · metrics 2.10.0
NuGet
open-telemetry/opentelemetry-dotnet
The OpenTelemetry .NET Client
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Maven
undertow-io/undertow
High performance non-blocking webserver
Apache-2.0Oct 19, 2026 · metrics 2.10.0
NuGet · Maven
nuke-build/nuke
🏗 The AKEless Build System for C#/.NET
MITOct 20, 2026 · metrics 2.10.0
crates.io
sozu-proxy/sozu
Sōzu HTTP reverse proxy, configurable at runtime, fast and safe, built in Rust. It is awesome!
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
Maven
modelcontextprotocol/java-sdk
The official Java SDK for Model Context Protocol servers and clients. Maintained in collaboration with Spring AI
MITOct 19, 2026 · metrics 2.10.0
Go
go-gorp/gorp
Go Relational Persistence - an ORM-ish library for Go
MITOct 21, 2026 · metrics 2.10.0
Go
charmbracelet/glamour
Stylesheet-based markdown rendering for your CLI apps 💇🏻♀️
MITOct 21, 2026 · metrics 2.10.0
npm
livestorejs/livestore
LiveStore is a next-generation state management framework based on reactive SQLite and built-in sync engine.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · Go
geekjourneyx/md2wechat-skill
面向 AI Agent 的微信公众号创作与发布 CLI：Markdown 排版、AI 配图、预览与草稿创建；支持由浏览器 Agent 保存知乎、CSDN、头条未发布草稿。
Custom licenseOct 20, 2026 · metrics 2.10.0
crates.io
WithSecureOpenSource/chainsaw
Rapidly Search and Hunt through Windows Forensic Artefacts
GPL-3.0Oct 18, 2026 · metrics 2.10.0