Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,367
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
uber-go/zap
Blazing fast, structured, leveled logging in Go.
MITOct 20, 2026 · metrics 2.10.0
npm
lucide-icons/lucide
Beautiful & consistent icon toolkit made by the community. Open-source project and a fork of Feather Icons.
Custom licenseSep 16, 2026 · metrics 2.10.0
RubyGems · npm · PyPI
gitlabhq/gitlabhq
GitLab CE Mirror | Please open new issues in our issue tracker on GitLab.com
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
winstonjs/winston
A logger for just about everything.
MITSep 17, 2026 · metrics 2.10.0
npm
react-navigation/react-navigation
Routing and navigation for React Native and Web apps
No licenseSep 16, 2026 · metrics 2.10.0
—
iv-org/invidious
Invidious is an alternative front-end to YouTube
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
dolthub/dolt
Dolt – Git for Data
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
dataease/dataease
🔥 人人可用的开源 BI 工具，数据可视化神器。An open-source BI tool alternative to Tableau.
GPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
plotly/dash
Data Apps & Dashboards for Python. No JavaScript Required.
MITSep 16, 2026 · metrics 2.10.0
Maven
redisson/redisson
Redisson: Valkey & Redis Java Client and Real-Time Data Platform. Sync/Async/RxJava/Reactive API. Over 50 Valkey and Redis based Java objects and services: Set, Multimap, SortedSet, Map, List, Queue, Deque, Semaphore, Lock, AtomicLong, Map Reduce, Bloom filter, Spring, Tomcat, Scheduler, JCache API, Hibernate, RPC, local cache..
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven · PyPI
floci-io/floci
Light, fluffy, and always free - The AWS Local Emulator alternative
MITSep 16, 2026 · metrics 2.10.0
npm
youzan/vant
A lightweight, customizable Vue UI library for mobile web apps.
MITOct 4, 2026 · metrics 2.10.0
crates.io · npm
readest/readest
Readest is a modern, feature-rich ebook reader designed for avid readers offering seamless cross-platform access, powerful tools, and an intuitive interface to elevate your reading experience.
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
RubyGems
heartcombo/devise
Flexible authentication solution for Rails with Warden.
MITSep 16, 2026 · metrics 2.10.0
PyPI
modelcontextprotocol/python-sdk
The official Python SDK for Model Context Protocol servers and clients
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI · Go
browserbase/stagehand
The SDK For Browser Agents
MITSep 16, 2026 · metrics 2.10.0
crates.io · PyPI
tursodatabase/turso
A SQL database in Rust: SQLite-compatible, now also speaking Postgres (experimental). The LLVM of databases.
MITSep 16, 2026 · metrics 2.10.0
—
simdjson/simdjson
Parsing gigabytes of JSON per second : used by Facebook/Meta Velox, the Node.js runtime, ClickHouse, WatermelonDB, Apache Doris, Milvus, StarRocks
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
nocobase/nocobase
NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG no-code interface, so you get both speed and reliability.
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
urfave/cli
A declarative, simple, fast, and fun package for building command line tools in Go
MITSep 16, 2026 · metrics 2.10.0
Maven
google/gson
A Java serialization/deserialization library to convert Java Objects into JSON and back
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · Go · PyPI
argoproj/argo-cd
Declarative Continuous Deployment for Kubernetes
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
uutils/coreutils
Cross-platform Rust rewrite of the GNU coreutils
MITSep 17, 2026 · metrics 2.10.0
PyPI
Delgan/loguru
Python logging made (stupidly) simple
MITSep 16, 2026 · metrics 2.10.0
PyPI
PaddlePaddle/Paddle
PArallel Distributed Deep LEarning: Machine Learning Framework from Industrial Practice （『飞桨』核心框架，深度学习&机器学习高性能单机、分布式训练和跨平台部署）
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
pyg-team/pytorch_geometric
Graph Neural Network Library for PyTorch
MITSep 16, 2026 · metrics 2.10.0
PyPI
m-bain/whisperX
WhisperX: Automatic Speech Recognition with Word-level Timestamps (& Diarization)
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
npm
ramda/ramda
:ram: Practical functional Javascript
MITSep 17, 2026 · metrics 2.10.0
npm
semantic-release/semantic-release
📦🚀 Fully automated version management and package publishing
MITSep 16, 2026 · metrics 2.10.0
npm
processing/p5.js
p5.js is a client-side JS platform that empowers artists, designers, students, and anyone to learn to code and express themselves creatively on the web. It is based on the core principles of Processing. Looking for p5.js 2.0? http://beta.p5js.org
LGPL-2.1Sep 16, 2026 · metrics 2.10.0