Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,798
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
github/hotkey
Trigger an action on an element with a keyboard shortcut.
MITSep 14, 2026 · metrics 2.10.0
Packagist · PyPI
php-curl-class/php-curl-class
PHP Curl Class makes it easy to send HTTP requests and integrate with web APIs
UnlicenseSep 12, 2026 · metrics 2.10.0
PyPI
kizniche/Mycodo
An environmental monitoring and regulation system
GPL-3.0Oct 10, 2026 · metrics 2.10.0
npm
xpf0000/FlyEnv
Native local development environment for Windows, macOS & Linux. A modern alternative to XAMPP, MAMP, Laragon and Laravel Herd, with runtimes, databases, web servers, local sites, HTTPS, AI coding tools and MCP.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
crates.io · PyPI
nextest-rs/nextest
A next-generation test runner for Rust.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io · npm
stoatchat/stoatchat
The software powering Stoat
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
getkin/kin-openapi
OpenAPI 3.0 and 3.1 and 3.2 (and Swagger v2) implementation for Go (parsing, converting, validation, and more)
MITSep 18, 2026 · metrics 2.10.0
PyPI
mljar/mljar-supervised
Python package for AutoML on Tabular Data with Feature Engineering, Hyper-Parameters Tuning, Explanations and Automatic Documentation
MITSep 19, 2026 · metrics 2.10.0
Maven · npm
spring-projects/spring-data-jpa
Simplifies the development of creating a JPA-based data access layer.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
RubyGems
cyu/rack-cors
Rack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
MITSep 12, 2026 · metrics 2.10.0
Maven
xerial/sqlite-jdbc
SQLite JDBC Driver
Apache-2.0Sep 14, 2026 · metrics 2.10.0
PyPI · npm
aws-powertools/powertools-lambda-python
A developer toolkit to implement Serverless best practices and increase developer velocity.
MIT-0Sep 18, 2026 · metrics 2.10.0
Packagist
bobthecow/mustache.php
A Mustache implementation in PHP.
MITSep 14, 2026 · metrics 2.10.0
RubyGems · npm
shrinerb/shrine
File Attachment toolkit for Ruby applications
MITSep 14, 2026 · metrics 2.10.0
Maven
erupts/erupt
Code as configuration. Annotate a Java entity with @Erupt and ship a production-grade admin backend in minutes — UI, RBAC, audit logs and APIs, all generated at runtime. No codegen, no frontend.
Apache-2.0Oct 25, 2026 · metrics 2.10.0
PyPI
google-deepmind/dm-haiku
JAX-based neural network library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
bnb-chain/bsc
A BNB Smart Chain client based on the go-ethereum fork
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
PyPI
erdewit/ib_insync
Python sync/async framework for Interactive Brokers API
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
pyeve/cerberus
Lightweight, extensible data validation library for Python
ISCSep 17, 2026 · metrics 2.10.0
Go
storj/storj
Ongoing Storj v3 development. Decentralized cloud object storage that is affordable, easy to use, private, and secure.
AGPL-3.0Oct 25, 2026 · metrics 2.10.0
Go · PyPI
open-policy-agent/conftest
Write tests against structured configuration data using the Open Policy Agent Rego query language
Custom licenseOct 11, 2026 · metrics 2.10.0
npm
Automattic/juice
Juice inlines CSS stylesheets into your HTML source.
MITSep 17, 2026 · metrics 2.10.0
npm
node-cron/node-cron
Job scheduling for Node.js with overlap prevention, distributed coordination, and background tasks. Zero dependencies.
ISCSep 17, 2026 · metrics 2.10.0
crates.io
eclipse-zenoh/zenoh
zenoh unifies data in motion, data in-use, data at rest and computations. It carefully blends traditional pub/sub with geo-distributed storages, queries and computations, while retaining a level of time and space efficiency that is well beyond any of the mainstream stacks.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
punkpeye/fastmcp
A TypeScript framework for building MCP servers.
MITOct 24, 2026 · metrics 2.10.0
npm
cristianbote/goober
🥜 goober, a less than 1KB 🎉 css-in-js alternative with a familiar API
MITSep 17, 2026 · metrics 2.10.0
Go · crates.io · npm
PeerDB-io/peerdb
Fast, Simple and a cost effective tool to replicate data from Postgres to Data Warehouses, Queues and Storage
AGPL-3.0Sep 11, 2026 · metrics 2.10.0
npm
langchain-ai/langgraphjs
Framework to build resilient language agents as graphs.
MITSep 11, 2026 · metrics 2.10.0
PyPI
Tinche/aiofiles
File support for asyncio
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
YousefED/typescript-json-schema
Generate json-schema from your Typescript sources
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0