Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,351
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI · npm
facebookresearch/fastText
Library for fast text representation and classification.
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
deepset-ai/haystack
Open-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
mihomo-party-org/clash-party
:electron: Another Mihomo GUI.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm · Packagist · Maven +2
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
op7418/guizang-ppt-skill
AI-agent Skill for generating polished HTML slide decks: editorial magazine and Swiss layouts, image prompts, social covers, and a WebGL/low-power presentation runtime.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
—
microsoft/winget-cli
WinGet is the Windows Package Manager. This project includes a CLI (Command Line Interface), PowerShell modules, and a COM (Component Object Model) API (Application Programming Interface).
MITSep 16, 2026 · metrics 2.10.0
Go
GopeedLab/gopeed
A fast, modern download manager for HTTP, BitTorrent, Magnet, and ed2k. Cross-platform, built with Golang and Flutter.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
rstacruz/nprogress
For slim progress bars like on YouTube, Medium, etc
MITSep 17, 2026 · metrics 2.10.0
Maven · PyPI
apache/flink
Apache Flink
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · crates.io
rollup/rollup
Next-generation ES module bundler
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
GrapesJS/grapesjs
Free and Open source Web Builder Framework. Next generation tool for building templates without coding
Custom licenseSep 20, 2026 · metrics 2.10.0
Go
stretchr/testify
A toolkit with common assertions and mocks that plays nicely with the standard library
MITSep 16, 2026 · metrics 2.10.0
npm · Go
microsoft/typescript-go
Staging repo for development of native port of TypeScript
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
apify/crawlee
Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
spotDL/spotify-downloader
Download your Spotify playlists and songs along with album art and metadata (from YouTube if a match is found).
MITSep 17, 2026 · metrics 2.10.0
Go
dapr/dapr
Dapr is a portable runtime for building distributed applications across cloud and edge, combining event-driven architecture with workflow orchestration.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
NuGet
icsharpcode/ILSpy
.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
MITSep 16, 2026 · metrics 2.10.0
npm
BabylonJS/Babylon.js
Babylon.js is a powerful, beautiful, simple, and open game and rendering engine packed into a friendly JavaScript framework.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
apache/incubator-seata
:fire: Seata is an easy-to-use, high-performance, open source distributed transaction solution.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
kovidgoyal/calibre
The official source code repository for the calibre ebook manager
GPL-3.0Sep 20, 2026 · metrics 2.10.0
npm · Packagist · PyPI
select2/select2
Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.
MITSep 16, 2026 · metrics 2.10.0
npm · Packagist
simple-icons/simple-icons
SVG icons for popular brands
CC0-1.0Sep 16, 2026 · metrics 2.10.0
npm
JakeChampion/fetch
A window.fetch JavaScript polyfill.
MITSep 17, 2026 · metrics 2.10.0
crates.io · npm
biomejs/biome
A toolchain for web projects, aimed to provide functionalities to maintain them. Biome offers formatter and linter, usable via CLI and LSP.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
localForage/localForage
💾 Offline storage, improved. Wraps IndexedDB, WebSQL, or localStorage using a simple but powerful API.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
a2aproject/A2A
Agent2Agent (A2A) is an open protocol enabling communication and interoperability between opaque agentic applications.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
fmtlib/fmt
A modern formatting library
MITSep 16, 2026 · metrics 2.10.0
PyPI · npm
shap/shap
A game theoretic approach to explain the output of any machine learning model.
MITSep 16, 2026 · metrics 2.10.0
Go
sirupsen/logrus
Structured, pluggable logging for Go.
MITSep 16, 2026 · metrics 2.10.0
PyPI
argotorg/solidity
Solidity, the Smart Contract Programming Language
GPL-3.0Sep 18, 2026 · metrics 2.10.0