Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,367
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm · Go · PyPI
pulumi/pulumi
Pulumi - Infrastructure as Code in any programming language 🚀
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
NativeScript/NativeScript
⚡ Write Native with TypeScript ✨ Best of all worlds (TypeScript, Swift, Objective C, Kotlin, Java, Dart). Use what you love ❤️ Angular, React, Solid, Svelte, Vue with: iOS (UIKit, SwiftUI), Android (View, Jetpack Compose), Flutter and you name it compatible.
MITSep 16, 2026 · metrics 2.10.0
Maven
alibaba/fastjson
FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.
Apache-2.0Aug 26, 2026 · metrics 2.10.0
crates.io · Go · npm +1
goauthentik/authentik
The authentication glue you need.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
zloirock/core-js
Standard Library
MITSep 16, 2026 · metrics 2.10.0
npm
request/request
🏊🏾 Simplified HTTP request client.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
homebridge/homebridge
HomeKit support for the impatient.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
d2lang/d2
D2 is a modern diagram scripting language that turns text to diagrams.
MPL-2.0Sep 23, 2026 · metrics 2.10.0
PyPI
SYSTRAN/faster-whisper
Faster Whisper transcription with CTranslate2
MITSep 16, 2026 · metrics 2.10.0
npm
toon-format/toon
🎒 Token-Oriented Object Notation (TOON) – compact, human-readable serialization of JSON data for LLM prompts. TypeScript SDK, CLI, benchmarks.
MITSep 16, 2026 · metrics 2.10.0
PyPI
ranaroussi/yfinance
Download market data from Yahoo! Finance's API
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io · npm
clockworklabs/SpacetimeDB
Development at the speed of light
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
MITSep 16, 2026 · metrics 2.10.0
PyPI · Go · npm
Tencent/WeKnora
Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go · PyPI
cilium/cilium
eBPF-based Networking, Security, and Observability
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
OpenListTeam/OpenList
A new AList Fork to Anti Trust Crisis
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
PyPI
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
angular/components
Component infrastructure and Material Design components for Angular
MITSep 16, 2026 · metrics 2.10.0
PyPI
pypa/pipenv
Python Development Workflow for Humans.
MITSep 16, 2026 · metrics 2.10.0
Go · npm
flipped-aurora/gin-vue-admin
🚀Vite+Vue3+Gin拥有AI辅助的基础开发平台，企业级业务AI+开发解决方案，内置mcp辅助服务，内置skills管理，支持TS和JS混用。它集成了JWT鉴权、权限管理、动态路由、显隐可控组件、分页封装、多点登录拦截、资源权限、上传下载、代码生成器、表单生成器和可配置的导入导出等开发必备功能。
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · PyPI
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
crates.io · npm
nextai-translator/nextai-translator
基于 ChatGPT API 的划词翻译浏览器插件和跨平台桌面端应用 - Browser extension and cross-platform desktop application for translation based on ChatGPT API.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Maven
apache/skywalking
APM, Application Performance Monitoring System
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go · Maven
go-delve/delve
Delve is a debugger for the Go programming language.
MITOct 18, 2026 · metrics 2.10.0
PyPI
Dao-AILab/flash-attention
Fast and memory-efficient exact attention
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
dubinc/dub
The modern link attribution platform. Loved by world-class marketing teams like Framer, Perplexity, Superhuman, Twilio, Buffer and more.
Custom licenseOct 16, 2026 · metrics 2.10.0
Go
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
crates.io
actix/actix-web
Actix Web is a powerful, pragmatic, and extremely fast web framework for Rust.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · crates.io
zama-ai/fhevm
FHEVM, a full-stack framework for integrating Fully Homomorphic Encryption (FHE) with blockchain applications
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
danielgatis/rembg
Rembg is a tool to remove images background
MITSep 16, 2026 · metrics 2.10.0