Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,768
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
sycamore-rs/sycamore
A library for creating reactive web apps in Rust and WebAssembly
MITOct 8, 2026 · metrics 2.10.0
npm
nodejs/nan
Native Abstractions for Node.js
MITSep 17, 2026 · metrics 2.10.0
—
cucumber/common
A home for issues that are common to multiple cucumber repositories
MITSep 12, 2026 · metrics 2.10.0
Go
ClickHouse/clickhouse-go
Golang driver for ClickHouse
Apache-2.0Oct 25, 2026 · metrics 2.10.0
npm
davidhu2000/react-spinners
A collection of loading spinner components for react
MITOct 14, 2026 · metrics 2.10.0
crates.io
awslabs/aws-sdk-rust
AWS SDK for the Rust Programming Language
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · crates.io
Ataraxy-Labs/sem
Semantic version control => entity-level diffs, blame, and impact analysis on top of git. 28 languages via tree-sitter. Built for coding agents.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist · npm
austintoddj/canvas
Publishing on your own terms
MITSep 18, 2026 · metrics 2.10.0
RubyGems
deivid-rodriguez/byebug
Debugging in Ruby
BSD-2-ClauseOct 23, 2026 · metrics 2.10.0
npm
haydenbleasel/ultracite
A highly opinionated, zero-configuration linter and formatter.
MITOct 22, 2026 · metrics 2.10.0
crates.io · PyPI
matthart1983/netwatch
Real-time network diagnostics in your terminal. One command, zero config, instant visibility.
MITSep 28, 2026 · metrics 2.10.0
Packagist
sensiolabs/SensioFrameworkExtraBundle
An extension to Symfony FrameworkBundle that adds annotation configuration for Controller classes
MITSep 13, 2026 · metrics 2.10.0
Maven
synthetichealth/synthea
Synthetic Patient Population Simulator
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
bcherny/json-schema-to-typescript
Compile JSON Schema to TypeScript type declarations
MITOct 24, 2026 · metrics 2.10.0
Packagist
ezyang/htmlpurifier
Standards compliant HTML filter written in PHP
LGPL-2.1Oct 24, 2026 · metrics 2.10.0
npm · Packagist
Kovah/LinkAce
LinkAce is a self-hosted archive to collect links of your favorite websites.
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
golang/crypto
[mirror] Go supplementary cryptography libraries
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
PyPI
pyauth/pyotp
Python One-Time Password Library
Custom licenseOct 23, 2026 · metrics 2.10.0
Packagist
symfony/polyfill-intl-idn
Symfony polyfill for intl's idn_to_ascii and idn_to_utf8 functions
MITOct 20, 2026 · metrics 2.10.0
Packagist
gongfuxiang/shopxo
ShopXO企业级免费开源商城系统，可视化DIY拖拽装修、包含PC、H5、多端小程序(微信+支付宝+百度+头条&抖音+QQ+快手)、APP、多仓库、多商户、多门店、IM客服，进销存遵循MIT开源协议发布、基于ThinkPHP8框架研发
MITOct 25, 2026 · metrics 2.10.0
Go
kubernetes/kubectl
Issue tracker and mirror of kubectl code
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
thomiceli/opengist
Self-hosted pastebin powered by Git, open-source alternative to Github Gist.
AGPL-3.0Sep 15, 2026 · metrics 2.10.0
npm · PyPI
jupyter-widgets/ipywidgets
Interactive Widgets for the Jupyter Notebook
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
Maven
kosi-libs/Kodein
Painless Kotlin Dependency Injection
MITSep 15, 2026 · metrics 2.10.0
PyPI
django-import-export/django-import-export
Django application and library for importing and exporting data with admin integration.
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
KhronosGroup/Vulkan-Docs
The Vulkan API Specification and related tools
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
django-oauth/django-oauth-toolkit
OAuth2 goodies for the Djangonauts!
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
overtrue/easy-sms
📲 一款多渠道的短信发送轮子
MITOct 22, 2026 · metrics 2.10.0
Go
dragonflyoss/dragonfly
Delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology, with an optional content‑addressable filesystem that accelerates OCI container launch.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
RubyGems
krisleech/wisper
A micro library providing Ruby objects with Publish-Subscribe capabilities
No licenseSep 12, 2026 · metrics 2.10.0