Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,309
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
cursor/cursor
No repository description published.
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
certbot/certbot
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm · crates.io
Yeachan-Heo/oh-my-codex
OmX - Oh My codeX: Your codex is not alone. Add hooks, agent teams, HUDs, and so much more.
MITSep 16, 2026 · metrics 2.10.0
crates.io
tokio-rs/tokio
A runtime for writing reliable asynchronous applications with Rust. Provides I/O, networking, scheduling, timers, ...
MITSep 16, 2026 · metrics 2.10.0
Maven
binarywang/WxJava
微信开发 Java SDK ，支持包括微信支付，开放平台，小程序，企业微信，视频号，公众号等的后端开发
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io · PyPI
surrealdb/surrealdb
A scalable, distributed, collaborative, document-graph database, for the realtime web
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
immutable-js/immutable-js
Immutable persistent data collections for Javascript which increase efficiency and simplicity.
MITSep 17, 2026 · metrics 2.10.0
Go · npm
github/github-mcp-server
GitHub's official MCP Server
MITSep 16, 2026 · metrics 2.10.0
—
telegramdesktop/tdesktop
Telegram Desktop messaging app
GPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
open-mmlab/mmdetection
OpenMMLab Detection Toolbox and Benchmark
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io · npm
zeroclaw-labs/zeroclaw
Fast, small, and fully autonomous AI personal assistant infrastructure, any OS, any platform — deploy anywhere, swap anything 🦀
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
floating-ui/floating-ui
A JavaScript library to position floating elements and create interactions for them.
MITSep 17, 2026 · metrics 2.10.0
PyPI
numpy/numpy
The fundamental package for scientific computing with Python.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
labstack/echo
High performance, minimalist Go web framework
MITSep 16, 2026 · metrics 2.10.0
npm
lovell/sharp
High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, AVIF and TIFF images. Uses the libvips library.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · PyPI
podman-container-tools/podman
Podman: A tool for managing OCI containers and pods.
Apache-2.0Aug 23, 2026 · metrics 2.10.0
npm
vercel/swr
React Hooks for Data Fetching
MITOct 19, 2026 · metrics 2.10.0
Go
cockroachdb/cockroach
CockroachDB — the cloud native, distributed SQL database designed for high availability, effortless scale, and control over data placement.
Custom licenseSep 18, 2026 · metrics 2.10.0
crates.io
dandavison/delta
A syntax-highlighting pager for git, diff, grep, rg --json, and blame output
MITOct 6, 2026 · metrics 2.10.0
Go
beego/beego
beego is an open-source, high-performance web framework for the Go programming language.
Custom licenseOct 12, 2026 · metrics 2.10.0
npm
pmndrs/react-three-fiber
🇨🇭 A React renderer for Three.js
MITSep 20, 2026 · metrics 2.10.0
RubyGems
facebook/rocksdb
A library that provides an embeddable, persistent key-value store for fast storage.
GPL-2.0Oct 19, 2026 · metrics 2.10.0
npm
honojs/hono
Web framework built on Web Standards
MITSep 16, 2026 · metrics 2.10.0
npm · Maven · PyPI
conductor-oss/conductor
Conductor is an event driven agentic workflow engine providing durable and highly resilient execution engine for applications and AI Agents
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
dokku/dokku
A docker-powered PaaS that helps you build and manage the lifecycle of applications
MITSep 16, 2026 · metrics 2.10.0
crates.io · PyPI
jj-vcs/jj
A Git-compatible VCS that is both simple and powerful
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI · Go · npm
onyx-dot-app/onyx
Open Source AI Platform - AI Chat with advanced features that works with every LLM
Custom licenseSep 16, 2026 · metrics 2.10.0
Go · npm · PyPI
SigNoz/signoz
SigNoz is an open-source, OpenTelemetry-native observability platform for your team and their AI agents. Get logs, metrics, and traces in one tool with features like APM, distributed tracing, log management, infra monitoring, etc. Combined with SigNoz MCP and a native AI teammate (in SigNoz Cloud) it helps you build more resilient apps.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go · crates.io · npm
hasura/graphql-engine
Blazing fast, instant realtime GraphQL APIs on all your data with fine grained access control, also trigger webhooks on database events.
Apache-2.0Sep 16, 2026 · metrics 2.10.0