Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,396
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm · RubyGems
forem/forem
For empowering community 🌱
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
be5invis/Iosevka
Versatile typeface for code, from code.
OFL-1.1Sep 19, 2026 · metrics 2.10.0
PyPI · npm
trycua/cua
Scale computer-use 2.0 with open-source drivers, cross-OS fleets, and benchmarks for training, evaluation, and data generation.
MITSep 16, 2026 · metrics 2.10.0
—
doomemacs/core
An Emacs framework for the stubborn martian hacker
MITSep 18, 2026 · metrics 2.10.0
npm
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
MITSep 16, 2026 · metrics 2.10.0
crates.io
ratatui/ratatui
A Rust crate for cooking up terminal user interfaces (TUIs) 👨🍳🐀 https://ratatui.rs
MITSep 18, 2026 · metrics 2.10.0
Go
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
akfamily/akshare
AKShare is an elegant and simple financial data interface library for Python, built for human beings! 开源财经数据接口库
MITSep 16, 2026 · metrics 2.10.0
Maven
apache/rocketmq
Apache RocketMQ is a cloud native messaging and streaming platform, making it simple to build event-driven applications.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
claude-code-best/claude-code
原汁原昧 Claude Code 可运行,可构建, 可调试版; 生产级工程化, 企业级可靠性; 安全无毒, 内存泄露修复
No licenseSep 16, 2026 · metrics 2.10.0
npm
js-cookie/js-cookie
A simple, lightweight JavaScript API for handling cookies, client-side.
MITSep 17, 2026 · metrics 2.10.0
crates.io · npm
vectordotdev/vector
A high-performance observability data pipeline.
MPL-2.0Sep 16, 2026 · metrics 2.10.0
Go · npm
m1k1o/neko
A self hosted virtual browser that runs in docker and uses WebRTC.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go · PyPI
HyNetworks/hysteria
Hysteria is powerful, lightning-fast, and censorship-resistant open-source proxy software
MITSep 16, 2026 · metrics 2.10.0
npm
NVIDIA/NemoClaw
Run agents like Hermes, LangChain Deep Agents, and OpenClaw more securely inside NVIDIA OpenShell with managed inference
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
jhipster/generator-jhipster
JHipster is a development platform to quickly generate, develop, & deploy modern web applications & microservice architectures.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
mkdocs/mkdocs
Project documentation with Markdown.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
Maven · npm
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
react-grid-layout/react-grid-layout
A draggable and resizable grid layout with responsive breakpoints, for React.
MITSep 17, 2026 · metrics 2.10.0
npm
redux-saga/redux-saga
An alternative side effect model for Redux apps
MITSep 16, 2026 · metrics 2.10.0
crates.io · PyPI
RustPython/RustPython
A Python Interpreter written in Rust
MITSep 29, 2026 · metrics 2.10.0
npm
darkreader/darkreader
Dark Reader Chrome and Firefox extension
MITSep 16, 2026 · metrics 2.10.0
npm
vueuse/vueuse
Collection of essential Vue Composition Utilities for Vue 3
MITSep 17, 2026 · metrics 2.10.0
Packagist
PHPMailer/PHPMailer
The classic email sending library for PHP
LGPL-2.1Sep 16, 2026 · metrics 2.10.0
npm · crates.io · RubyGems
facebook/flow
Adds static typing to JavaScript to improve developer productivity and code quality.
MITSep 16, 2026 · metrics 2.10.0
Go
redis/go-redis
Redis Go client
BSD-2-ClauseOct 17, 2026 · metrics 2.10.0
npm
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
MITSep 16, 2026 · metrics 2.10.0
PyPI
tornadoweb/tornado
Tornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
palantir/blueprint
A React-based UI toolkit for the web
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
necolas/react-native-web
Cross-platform React UI packages
MITSep 16, 2026 · metrics 2.10.0