Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,259
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
state-spaces/mamba
Mamba SSM architecture
Apache-2.0Oct 21, 2026 · metrics 2.10.0
crates.io · npm
longbridge/gpui-kit
Rust GUI components for building fantastic cross-platform desktop application by using GPUI.
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
slackhq/nebula
A scalable overlay networking tool with a focus on performance, simplicity and security
MITOct 19, 2026 · metrics 2.10.0
Maven
swagger-api/swagger-codegen
swagger-codegen contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
projectdiscovery/katana
A next-generation crawling and spidering framework.
MITOct 19, 2026 · metrics 2.10.0
npm
lidge-jun/opencodex
Universal provider proxy for OpenAI Codex & Claude Code — use any LLM (Claude, Gemini, Grok, DeepSeek, Ollama…) with Codex CLI, App, SDK, and Claude Code
MITOct 19, 2026 · metrics 2.10.0
crates.io
getzola/zola
A fast static site generator in a single binary with everything built-in. https://www.getzola.org
EUPL-1.2Oct 19, 2026 · metrics 2.10.0
npm
Effect-TS/effect
Build production-ready applications in TypeScript
MITOct 20, 2026 · metrics 2.10.0
crates.io
tursodatabase/libsql
libSQL is a fork of SQLite that is both Open Source, and Open Contributions.
MITOct 16, 2026 · metrics 2.10.0
Go
ent/ent
An entity framework for Go
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
ceph/ceph
Ceph is a distributed object, block, and file storage platform
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI · crates.io
NVIDIA/OpenShell
OpenShell is the safe, private runtime for autonomous AI agents.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI · npm
andrewyng/aisuite
Simple, unified interface to multiple Generative AI providers
MITOct 19, 2026 · metrics 2.10.0
npm
umijs/umi
A framework in react community ✨
MITOct 21, 2026 · metrics 2.10.0
—
OrcaSlicer/OrcaSlicer
G-code generator for 3D printers (Bambu, Prusa, Voron, VzBot, RatRig, Creality, etc.)
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
PyPI · Go · npm
opensandbox-group/OpenSandbox
Secure, Fast, and Extensible Sandbox runtime for AI agents.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · PyPI
eigent-ai/eigent
Eigent: The Open Source Cowork Desktop - Local and Free Alternative to Claude Cowork and Codex
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
yc-software/qm
Multiplayer agent harness for work.
MITOct 18, 2026 · metrics 2.10.0
Go · Maven
apache/pulsar
Apache Pulsar - distributed pub-sub messaging system
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
redis/ioredis
🚀 A robust, performance-focused, and full-featured Redis client for Node.js.
MITOct 18, 2026 · metrics 2.10.0
npm
feathersjs/feathers
The API and real-time application framework
MITOct 22, 2026 · metrics 2.10.0
npm
TanStack/router
🤖 A client-first, server-capable, fully type-safe router and full-stack framework for the web (React and more).
MITOct 20, 2026 · metrics 2.10.0
npm
caprover/caprover
Scalable PaaS (automated Docker+nginx) - aka Heroku on Steroids
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
No licenseOct 19, 2026 · metrics 2.10.0
PyPI
NVIDIA/TensorRT-LLM
TensorRT LLM provides users with an easy-to-use Python API to define Large Language Models (LLMs) and supports state-of-the-art optimizations to perform inference efficiently on NVIDIA GPUs. TensorRT LLM also contains components to create Python and C++ runtimes that orchestrate the inference execution in a performant way.
Custom licenseOct 21, 2026 · metrics 2.10.0
—
OpenVPN/openvpn
OpenVPN is an open source VPN daemon
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
MITOct 19, 2026 · metrics 2.10.0
Maven
ktorio/ktor
Framework for quickly creating connected applications in Kotlin with minimal effort
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
benbjohnson/litestream
Streaming replication for SQLite.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm · PyPI
e2b-dev/E2B
Open-source, secure environment with real-world tools for enterprise-grade agents.
Apache-2.0Oct 20, 2026 · metrics 2.10.0