Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,040
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
apache/horaedb
Apache HoraeDB (incubating) is a high-performance, distributed, cloud native time-series database.
Apache-2.0Sep 2, 2026 · metrics 2.10.0
npm · Go · crates.io
numaproj/numaflow
Kubernetes-native platform to run massively parallel data/streaming jobs
Apache-2.0Sep 2, 2026 · metrics 2.10.0
RubyGems
kpumuk/meta-tags
Search Engine Optimization (SEO) for Ruby on Rails applications.
MITSep 1, 2026 · metrics 2.10.0
npm
websockets/wscat
WebSocket cat
MITSep 6, 2026 · metrics 2.10.0
npm
homebridge/HAP-NodeJS
Node.js implementation of the HomeKit Accessory Protocol (HAP)
Apache-2.0Sep 5, 2026 · metrics 2.10.0
PyPI
doronz88/pymobiledevice3
Pure python3 implementation for working with iDevices (iPhone, etc...).
GPL-3.0Sep 6, 2026 · metrics 2.10.0
npm
nteract/semiotic
React data visualization library for streaming, networks, and AI-assisted development
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
argoproj/argo-events
Event-driven Automation Framework for Kubernetes
Apache-2.0Sep 5, 2026 · metrics 2.10.0
PyPI
flaskbb/flaskbb
A classic Forum Software in Python using Flask.
Custom licenseSep 6, 2026 · metrics 2.10.0
npm · Packagist
glincker/thesvg
6,500+ brand SVG icons for developers. Tree-shakeable, typed, open source. npm i thesvg
MITSep 5, 2026 · metrics 2.10.0
Go
FloatTech/ZeroBot-Plugin
基于 ZeroBot 的 OneBot 插件
AGPL-3.0Sep 5, 2026 · metrics 2.10.0
NuGet
WalletWasabi/WalletWasabi
Open-source, non-custodial, privacy preserving Bitcoin wallet for Windows, Linux, and Mac.
MITAug 30, 2026 · metrics 2.10.0
npm
versatica/JsSIP
JsSIP, the JavaScript SIP library
Custom licenseSep 5, 2026 · metrics 2.10.0
crates.io
nical/lyon
2D graphics rendering on the GPU in rust using path tessellation.
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
shaka-project/shaka-packager
A media packaging and development framework for VOD and Live DASH and HLS applications, supporting Common Encryption for Widevine and other DRM Systems.
Custom licenseSep 5, 2026 · metrics 2.10.0
Go · npm
FairwindsOps/pluto
A cli tool to help discover deprecated apiVersions in Kubernetes
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Maven
bytedance/bhook
通用的Android PLT hook库，支持armeabi-v7a，arm64-v8a，x86，x86_64
MITSep 5, 2026 · metrics 2.10.0
npm
ueberdosis/hocuspocus
The Yjs CRDT WebSocket backend for conflict-free real-time collaboration in your app.
MITSep 6, 2026 · metrics 2.10.0
npm
malloydata/malloy
Malloy is a modern open source language for describing data relationships and transformations.
Custom licenseSep 5, 2026 · metrics 2.10.0
Maven
google/jimfs
An in-memory file system for Java
Apache-2.0Sep 4, 2026 · metrics 2.10.0
npm
chrisryugj/korean-law-mcp
법제처 국가법령정보를 LLM에서 바로 조회하는 MCP 서버. 법령·판례·조례 검색과 인용 검증 | MCP server for Korean law — search statutes, precedents, and ordinances, and verify citations
MITSep 5, 2026 · metrics 2.10.0
crates.io
eclipse-iceoryx/iceoryx2
Eclipse iceoryx2™ - true zero-copy inter-process-communication with a Rust core
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
docmd-io/docmd
Documentation compiler for humans and machines. One Markdown source to website, search, AI context, and knowledge formats together.
MITSep 6, 2026 · metrics 2.10.0
PyPI · npm
roboflow/inference
Turn any computer or edge device into a command center for your computer vision projects.
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist · PyPI
beste/firebase-php
Unofficial Firebase Admin SDK for PHP
MITSep 5, 2026 · metrics 2.10.0
npm
Shuffle/Shuffle
Shuffle: A general purpose security automation platform. Our focus is on collaboration and resource sharing.
AGPL-3.0Aug 31, 2026 · metrics 2.10.0
crates.io
tafia/calamine
A pure Rust Excel/OpenDocument SpreadSheets file reader: rust on metal sheets
MITSep 5, 2026 · metrics 2.10.0
npm · PyPI
samuelgursky/davinci-resolve-mcp
MCP server integration for DaVinci Resolve Studio
MITSep 6, 2026 · metrics 2.10.0
Maven
hapifhir/hapi-fhir
🔥 HAPI FHIR - Java API for HL7 FHIR Clients and Servers
Apache-2.0Sep 2, 2026 · metrics 2.10.0
npm · crates.io
drl990114/MarkFlowy
AI-powered cross-platform editor for WYSIWYG Markdown and general-purpose text editing.
AGPL-3.0Sep 5, 2026 · metrics 2.10.0