Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,896
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
lxml/lxml
The lxml XML toolkit for Python
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
next-safe-action/next-safe-action
Type safe and validated Server Actions in your Next.js project.
MITSep 13, 2026 · metrics 2.10.0
RubyGems
zombocom/derailed_benchmarks
Go faster, off the Rails - Benchmarks for your whole Rails app
No licenseSep 12, 2026 · metrics 2.10.0
crates.io
stacks-network/stacks-core
The Stacks blockchain implementation
GPL-3.0Oct 18, 2026 · metrics 2.10.0
NuGet
EasyNetQ/EasyNetQ
An easy to use .NET API for RabbitMQ
MITOct 21, 2026 · metrics 2.10.0
—
bincode-org/bincode
A binary encoder / decoder implementation in Rust.
No licenseSep 17, 2026 · metrics 2.10.0
npm
software-mansion/argent
An agentic toolkit to control, debug, and profile iOS and Android apps. Made by Software Mansion.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
laravel/breeze
Minimal Laravel authentication scaffolding with Blade, Vue, or React + Tailwind.
MITOct 14, 2026 · metrics 2.10.0
Go
twmb/franz-go
franz-go is a feature complete, pure Go library for Kafka from 0.8.0 through 4.2+. Producing, consuming, transacting, administrating, etc.
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
pngwn/MDsveX
A markdown preprocessor for Svelte.
MITSep 13, 2026 · metrics 2.10.0
PyPI
achillean/shodan-python
The official Python library for Shodan
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
sendgrid/sendgrid-nodejs
The Official Twilio SendGrid Led, Community Driven Node.js API Library
MITSep 17, 2026 · metrics 2.10.0
—
WayfireWM/wayfire
A modular and extensible wayland compositor
MITSep 19, 2026 · metrics 2.10.0
PyPI
ps2homebrew/Open-PS2-Loader
Game and app loader for Sony PlayStation 2
AFL-3.0Sep 14, 2026 · metrics 2.10.0
PyPI
tomerfiliba/plumbum
Plumbum: Shell Combinators
MITSep 10, 2026 · metrics 2.10.0
PyPI
mujocolab/mjlab
Isaac Lab API, powered by MuJoCo-Warp, for RL and robotics research
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
djrobstep/migra
DEPRECATED: Like diff but for PostgreSQL schemas
UnlicenseSep 17, 2026 · metrics 2.10.0
npm
zh-lx/code-inspector
🚀 Click the dom to open your IDE and position the cursor at dom's source code location! 点击页面 dom 来打开 IDE 并将光标自动定位到源代码位置!
MITOct 22, 2026 · metrics 2.10.0
npm
audreyt/ethercalc
Node.js port of Multi-user SocialCalc
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI · RubyGems
swirlai/swirl-search
AI Search & RAG Without Moving Your Data. Get instant answers from your company's knowledge across 100+ apps while keeping data secure. Deploy in minutes, not months.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
—
nfnt/resize
Pure golang image resizing
ISCSep 23, 2026 · metrics 2.10.0
Go
mum4k/termdash
Terminal based dashboard.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
shorebirdtech/shorebird
Code Push for Flutter and other tools for Flutter businesses.
Custom licenseOct 19, 2026 · metrics 2.10.0
Go · npm
kubernetes-sigs/kro
kro | Kube Resource Orchestrator
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
sablierapp/sablier
Start your containers on demand, shut them down automatically when there's no activity. Docker, Docker Swarm Mode, Podman, Kubernetes and Proxmox LXC compatible.
AGPL-3.0Oct 23, 2026 · metrics 2.10.0
npm
dabeng/OrgChart
It's a simple and direct organization chart plugin. Anytime you want a tree-like chart, you can turn to OrgChart.
MITSep 15, 2026 · metrics 2.10.0
npm
micromatch/micromatch
Highly optimized wildcard and glob matching library. Faster, drop-in replacement to minimatch and multimatch. Used by square, webpack, babel core, yarn, jest, ract-native, taro, bulma, browser-sync, stylelint, nyc, ava, and many others! Follow micromatch's author: https://github.com/jonschlinkert
MITSep 16, 2026 · metrics 2.10.0
npm
vpulim/node-soap
A SOAP client and server for node.js.
MITOct 24, 2026 · metrics 2.10.0
crates.io
abenz1267/walker
Multi-Purpose Launcher with a lot of features. Highly Customizable and fast.
GPL-3.0Sep 11, 2026 · metrics 2.10.0
PyPI
HBNetwork/python-decouple
Strict separation of config from code.
MITSep 17, 2026 · metrics 2.10.0