Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,718
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
xdebug/xdebug
Xdebug — Step Debugger and Debugging Aid for PHP
Custom licenseSep 13, 2026 · metrics 2.10.0
crates.io · npm
xintaofei/codeg
Collaborative multi-agent AI coding workspace: aggregate sessions from Claude Code, Codex, OpenCode, Pi, Grok Build, etc. Desktop app, self-hosted server, or Docker.
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
symfony/event-dispatcher-contracts
Generic abstractions related to dispatching event
MITOct 24, 2026 · metrics 2.10.0
PyPI
decalage2/oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven
google/volley
No repository description published.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
rubenv/sql-migrate
SQL schema migration tool for Go.
MITOct 21, 2026 · metrics 2.10.0
—
minitest/minitest
minitest provides a complete suite of testing facilities supporting TDD, BDD, and benchmarking.
No licenseSep 12, 2026 · metrics 2.10.0
crates.io
Amanieu/parking_lot
Compact and efficient synchronization primitives for Rust. Also provides an API for creating custom synchronization primitives.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
tamnd/kage
Shadow any website for offline viewing, with the JavaScript stripped out
MITSep 20, 2026 · metrics 2.10.0
Packagist · npm
brefphp/bref
Serverless PHP on AWS Lambda
MITOct 22, 2026 · metrics 2.10.0
crates.io · npm
slatedb/slatedb
A cloud native embedded storage engine built on object storage.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
web-infra-dev/rsbuild
Fast, extensible build tool for modern web development
MITOct 26, 2026 · metrics 2.10.0
npm
browserbase/mcp-server-browserbase
Allow LLMs to control a browser with Browserbase and Stagehand
Apache-2.0Oct 7, 2026 · metrics 2.10.0
PyPI · crates.io
xlwings/xlwings
xlwings is a Python library that makes it easy to call Python from Excel and vice versa. It works with Excel on Windows, macOS, and Excel on the web.
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
NVIDIA/cuda-python
CUDA Python: Performance meets Productivity
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Maven · PyPI
Netflix/dgs-framework
GraphQL for Java with Spring Boot made easy.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm · PyPI
i-am-bee/beeai-framework
Build production-ready AI agents in both Python and Typescript.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
MITSep 12, 2026 · metrics 2.10.0
npm
paralleldrive/cuid2
The most secure, collision-resistant ids optimized for horizontal scaling and performance.
MITSep 17, 2026 · metrics 2.10.0
npm
ding113/claude-code-hub
一个现代化的 Claude Code & Codex API 代理服务，提供智能负载均衡、用户管理和使用统计功能。
MITOct 18, 2026 · metrics 2.10.0
crates.io
pdeljanov/Symphonia
Pure Rust multimedia format demuxing, tag reading, and audio decoding library
MPL-2.0Sep 18, 2026 · metrics 2.10.0
npm · PyPI · Packagist +4
svix/svix-webhooks
The open source and enterprise-ready webhooks service 🦀
MITSep 11, 2026 · metrics 2.10.0
Go
charmbracelet/log
A minimal, colorful Go logging library 🪵
MITSep 23, 2026 · metrics 2.10.0
Maven
openhab/openhab1-addons
Add-ons for openHAB 1.x
EPL-2.0Sep 11, 2026 · metrics 2.10.0
NuGet
robinrodricks/FluentFTP
An FTP and FTPS client for .NET & .NET Standard, optimized for speed. Provides extensive FTP commands, File uploads/downloads, SSL/TLS connections, Automatic directory listing parsing, File hashing/checksums, File permissions/CHMOD, FTP proxies, FXP support, UTF-8 support, Async/await support, Powershell support and more. Written entirely in C#.
MITSep 11, 2026 · metrics 2.10.0
npm
auth0/jwt-decode
Decode JWT tokens; useful for browser applications.
MITSep 17, 2026 · metrics 2.10.0
crates.io · PyPI
google-ai-edge/LiteRT
LiteRT, successor to TensorFlow Lite. is Google's On-device framework for high-performance ML & GenAI deployment on edge platforms, via efficient conversion, runtime, and optimization
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
chaofengc/IQA-PyTorch
🔎 🖼️ 🔥PyTorch Toolbox for Image Quality Assessment, including PSNR, SSIM, LPIPS, FID, NIQE, NRQM(Ma), MUSIQ, TOPIQ, NIMA, DBCNN, BRISQUE, PI and more...
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
Rust-GPU/rust-gpu
🐉 Making Rust a first-class language and ecosystem for GPU shaders 🚧
Apache-2.0Oct 5, 2026 · metrics 2.10.0
—
automazeio/vibeproxy
Native macOS menu bar app to use your Claude Code & ChatGPT subscriptions with AI coding tools - no API keys needed
MITOct 21, 2026 · metrics 2.10.0