Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,474
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
asciinema/asciinema
Terminal session recorder, streamer and player 📹
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Go
influxdata/telegraf
Agent for collecting, processing, aggregating, and writing metrics, logs, and other arbitrary data.
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI
NVIDIA/SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
swagger-api/swagger-codegen
swagger-codegen contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
JedWatson/classnames
A simple javascript utility for conditionally joining classNames together
MITSep 17, 2026 · metrics 2.10.0
Go
jmoiron/sqlx
general purpose extensions to golang's database/sql
MITSep 16, 2026 · metrics 2.10.0
Go
VictoriaMetrics/VictoriaMetrics
VictoriaMetrics: fast, cost-effective monitoring solution and time series database
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
projectdiscovery/katana
A next-generation crawling and spidering framework.
MITOct 19, 2026 · metrics 2.10.0
npm
nodemailer/nodemailer
✉️ Send e-mails with Node.JS – easy as cake!
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
pallets/click
Python composable command line interface toolkit
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
PyPI · crates.io · npm
Canner/WrenAI
GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natural-language questions into trusted dashboards, charts, and SQL across 20+ data sources, such as BigQuery, Snowflake, PostgreSQL, ClickHouse, Amazon Redshift, Databricks and more.
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
reduxjs/redux-thunk
Thunk middleware for Redux
MITSep 17, 2026 · metrics 2.10.0
npm
clauderic/dnd-kit
The modern toolkit for building drag and drop interfaces
MITSep 17, 2026 · metrics 2.10.0
npm
lidge-jun/opencodex
Universal provider proxy for OpenAI Codex & Claude Code — use any LLM (Claude, Gemini, Grok, DeepSeek, Ollama…) with Codex CLI, App, SDK, and Claude Code
MITOct 19, 2026 · metrics 2.10.0
—
npm/npm
This repository is moving to: https://github.com/npm/cli
No licenseSep 16, 2026 · metrics 2.10.0
npm
apache/pouchdb
:kangaroo: - PouchDB is a pocket-sized database.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
browser-use/browser-harness
Browser Harness | Self-healing harness that enables LLMs to complete any task.
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI
redis/node-redis
Redis Node.js client
MITSep 17, 2026 · metrics 2.10.0
Maven
infinilabs/analysis-ik
🚌 The IK Analysis plugin integrates Lucene IK analyzer into Elasticsearch and OpenSearch, support customized dictionary.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
justauth/JustAuth
🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!
MITSep 16, 2026 · metrics 2.10.0
crates.io
getzola/zola
A fast static site generator in a single binary with everything built-in. https://www.getzola.org
EUPL-1.2Oct 19, 2026 · metrics 2.10.0
crates.io
transact-rs/sqlx
🧰 The Rust SQL Toolkit. An async, pure Rust SQL crate featuring compile-time checked queries without a DSL. Supports PostgreSQL, MySQL, and SQLite.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Maven
baomidou/mybatis-plus
An powerful enhanced toolkit of MyBatis for simplify development
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
getmaxun/maxun
🔥 The open-source no-code platform for web scraping, crawling, search and AI data extraction • Turn websites into structured APIs in minutes 🔥
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist
nikic/PHP-Parser
A PHP parser written in PHP
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
—
dotnet/corefx
This repo is used for servicing PR's for .NET Core 2.1 and 3.1. Please visit us at https://github.com/dotnet/runtime
No licenseSep 16, 2026 · metrics 2.10.0
Go
emirpasic/gods
GoDS (Go Data Structures) - Sets, Lists, Stacks, Maps, Trees, Queues, and much more
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven · npm
openzipkin/zipkin
Zipkin is a distributed tracing system
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
nfl/react-helmet
A document head manager for React
MITSep 17, 2026 · metrics 2.10.0
npm
sindresorhus/type-fest
A collection of essential TypeScript types
CC0-1.0Sep 16, 2026 · metrics 2.10.0