Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,718
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io · PyPI
Yamato-Security/hayabusa
Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.
AGPL-3.0Oct 12, 2026 · metrics 2.10.0
Go · npm
git-town/git-town
Git branches made easy
MITOct 19, 2026 · metrics 2.10.0
Go · npm
rocicorp/mono
99% of Queries in Zero Milliseconds
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
weechat/weechat
The extensible chat client.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go · npm
yisier/nps
基于NPS 0.26.10 版本二开而来，NPS接力项目。
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
zcreativelabs/react-simple-maps
Composable SVG map charts for data visualization in React
MITOct 22, 2026 · metrics 2.10.0
PyPI
opengeos/geoai
GeoAI: Artificial Intelligence for Geospatial Data
MITSep 21, 2026 · metrics 2.10.0
npm · RubyGems
vrm-c/UniVRM
UniVRM is a gltf-based VRM format implementation for Unity. English is here https://vrm.dev/en/ . 日本語 はこちら https://vrm.dev/
MITSep 18, 2026 · metrics 2.10.0
Go
gobuffalo/packr
The simple and easy way to embed static files into Go binaries.
MITSep 19, 2026 · metrics 2.10.0
Packagist
hybridauth/hybridauth
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
Custom licenseOct 13, 2026 · metrics 2.10.0
npm
xnimorz/use-debounce
A debounce hook for react
MITSep 17, 2026 · metrics 2.10.0
npm
slackapi/node-slack-sdk
Slack Developer Kit for Node.js
MITOct 23, 2026 · metrics 2.10.0
Packagist
zephir-lang/zephir
Zephir is a compiled high-level language aimed to ease the creation of C-extensions for PHP
MITOct 22, 2026 · metrics 2.10.0
npm
openclaw/acpx
Headless CLI client for stateful Agent Client Protocol (ACP) sessions
MITOct 24, 2026 · metrics 2.10.0
Packagist
symfony/maker-bundle
Symfony Maker Bundle
MITOct 24, 2026 · metrics 2.10.0
Packagist
Laravel-Backpack/CRUD
Build custom admin panels. Fast!
MITOct 22, 2026 · metrics 2.10.0
crates.io · PyPI
servo/webrender
A GPU-based renderer for the web
MPL-2.0Oct 20, 2026 · metrics 2.10.0
npm
cronvel/terminal-kit
Terminal utilities for node.js
MITSep 13, 2026 · metrics 2.10.0
PyPI
databricks/koalas
Koalas: pandas API on Apache Spark
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
seakee/CPA-Manager-Plus
A self-hosted CPA / CLIProxyAPI management panel and AI gateway observability dashboard for requests, usage, cost, quota, failures, and account health.
MITSep 12, 2026 · metrics 2.10.0
npm
ng-select/ng-select
:star: Native angular select component
MITOct 24, 2026 · metrics 2.10.0
npm
dorny/paths-filter
Conditionally run actions based on files modified by PR, feature branch or pushed commits
MITOct 19, 2026 · metrics 2.10.0
npm
tone-row/flowchart-fun
Easily generate flowcharts and diagrams from text ⿻
MITSep 13, 2026 · metrics 2.10.0
PyPI · crates.io · npm
Soju06/codex-lb
Codex/ChatGPT multiple account load balancer & proxy with usage tracking, dashboard, and OpenCode-compatible endpoints
MITOct 22, 2026 · metrics 2.10.0
—
microsoft/Power-Fx
Power Fx low-code programming language
MITSep 11, 2026 · metrics 2.10.0
npm
LegendApp/legend-list
A high-performance list component for React Native and React
MITSep 12, 2026 · metrics 2.10.0
crates.io
verus-lang/verus
Verified Rust for low-level systems code
MITOct 20, 2026 · metrics 2.10.0
npm
microsoft/reflect-metadata
Prototype for a Metadata Reflection API for ECMAScript
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
esamattis/underscore.string
String manipulation helpers for javascript
No licenseSep 17, 2026 · metrics 2.10.0
crates.io
sycamore-rs/sycamore
A library for creating reactive web apps in Rust and WebAssembly
MITOct 8, 2026 · metrics 2.10.0