Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,282
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
GoogleContainerTools/jib
🏗 Build container images for your Java applications.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
marko-js/marko
A declarative, HTML-based language that makes building web apps fun
MITOct 20, 2026 · metrics 2.10.0
Packagist
Intervention/image
PHP Image Processing
MITOct 20, 2026 · metrics 2.10.0
crates.io
diesel-rs/diesel
A safe, extensible ORM and Query Builder for Rust
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist · npm
phpstan/phpstan
PHP Static Analysis Tool - discover bugs in your code without running it!
MITOct 20, 2026 · metrics 2.10.0
crates.io · PyPI
ClementTsang/bottom
Yet another cross-platform graphical process/system monitor.
MITOct 20, 2026 · metrics 2.10.0
Maven
opensearch-project/OpenSearch
🔎 Open source distributed and RESTful search engine.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io · PyPI
qemu/qemu
Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are disabled. Please only use release tarballs from the QEMU website.
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
Unleash/unleash
Open-source feature management platform
AGPL-3.0Oct 17, 2026 · metrics 2.10.0
npm
facebook/astryx
An open source design system that's fully customizable and agent ready
MITOct 20, 2026 · metrics 2.10.0
Packagist
thephpleague/flysystem
Abstraction for local and remote filesystems
MITOct 20, 2026 · metrics 2.10.0
crates.io
rust-lang/rust-clippy
A bunch of lints to catch common mistakes and improve your Rust code. Book: https://doc.rust-lang.org/clippy/
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist
phpdotenv/phpdotenv
Loads environment variables from `.env` to `getenv()`, `$_ENV` and `$_SERVER` automagically.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
PyPI · Go
tinode/chat
Instant messaging platform. Backend in Go. Clients: Swift iOS, Java Android, JS webapp, scriptable command line; chatbots
GPL-3.0Oct 18, 2026 · metrics 2.10.0
npm
fkhadra/react-toastify
React notification made easy 🚀 !
MITOct 20, 2026 · metrics 2.10.0
Go
golang/groupcache
groupcache is a caching and cache-filling library, intended as a replacement for memcached in many cases.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
skypjack/entt
Gaming meets modern C++ - a fast and reliable entity component system (ECS) and much more
MITOct 20, 2026 · metrics 2.10.0
Go
swaggo/swag
Automatically generate RESTful API documentation with Swagger 2.0 for Go.
MITOct 21, 2026 · metrics 2.10.0
Packagist
spatie/laravel-permission
Associate users with roles and permissions
MITOct 20, 2026 · metrics 2.10.0
npm
taye/interact.js
JavaScript drag and drop, resizing and multi-touch gestures with inertia and snapping for modern browsers (and also IE9+)
MITOct 22, 2026 · metrics 2.10.0
npm
graphile/crystal
🔮 Graphile's Crystal Monorepo; home to Grafast, PostGraphile, pg-introspection, pg-sql2 and much more!
MITOct 20, 2026 · metrics 2.10.0
RubyGems
rubocop/rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
MITOct 18, 2026 · metrics 2.10.0
npm · crates.io · PyPI
run-llama/liteparse
A fast, helpful, and open-source document parser
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI · Maven · npm
datahub-project/datahub
The Context Platform for your Data and AI Stack
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
citusdata/citus
Distributed PostgreSQL as an extension
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
Maven
Netflix/eureka
AWS Service registry for resilient mid-tier load balancing and failover.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI · npm
daijro/camoufox
🦊 Anti-detect browser
MPL-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
bmaltais/kohya_ss
No repository description published.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Packagist · PyPI
ramsey/uuid
:snowflake: A PHP library for generating universally unique identifiers (UUIDs).
MITOct 20, 2026 · metrics 2.10.0
crates.io
bootandy/dust
A more intuitive version of du in rust
Apache-2.0Oct 20, 2026 · metrics 2.10.0