Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,517
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
RubyGems · npm
spree/spree
Open Source Platform for DTC, B2B Commerce, Marketplaces & Omnichannel. REST APIs, TypeScript SDKs, and production-ready Next.js storefront. Self-host it. Own your data. No vendor lock-in. Zero platform fees.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
avwo/whistle
HTTP, HTTP2, HTTPS, Websocket debugging proxy
MITSep 16, 2026 · metrics 2.10.0
npm
tc39/ecma262
Status, process, and documents for ECMA-262
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven
apache/hadoop
Apache Hadoop
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
mobile-dev-inc/Maestro
Painless E2E Automation for Mobile and Web
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
Konloch/bytecode-viewer
A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
microsoft/pyright
Static Type Checker for Python
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
alam00000/bentopdf
The Privacy First PDF Toolkit
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm · PyPI
eigent-ai/eigent
Eigent: The Open Source Cowork Desktop - Local and Free Alternative to Claude Cowork and Codex
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
ag-grid/ag-grid
The best JavaScript Data Table for building Enterprise Applications. Supports React / Angular / Vue / Plain JavaScript.
Custom licenseSep 16, 2026 · metrics 2.10.0
NuGet
Flow-Launcher/Flow.Launcher
:mag: Quick file search & app launcher for Windows with community-made plugins
MITSep 20, 2026 · metrics 2.10.0
npm
infinitered/reactotron
A desktop app for inspecting your React JS and React Native projects. macOS, Linux, and Windows.
MITSep 15, 2026 · metrics 2.10.0
npm
darkroomengineering/lenis
Smooth scroll as it should be
MITAug 27, 2026 · metrics 2.10.0
PyPI
pre-commit/pre-commit
A framework for managing and maintaining multi-language pre-commit hooks.
MITSep 16, 2026 · metrics 2.10.0
PyPI · npm
ag-ui-protocol/ag-ui
AG-UI: the Agent-User Interaction Protocol. Bring Agents into Frontend Applications.
MITAug 27, 2026 · metrics 2.10.0
—
PCSX2/pcsx2
PCSX2 - The Playstation 2 Emulator
GPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
pipecat-ai/pipecat
Open Source framework for voice agents, multimodal apps, and realtime AI. Maintained by Daily and the community.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
Go · npm
v2rayA/v2rayA
A web GUI client of Project V which supports VMess, VLESS, SS, SSR, Trojan, Tuic and Juicity protocols. 🚀
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
ansible/awx
AWX provides a web-based user interface, REST API, and task engine built on top of Ansible. It is one of the upstream projects for Red Hat Ansible Automation Platform.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
tidwall/gjson
Get JSON values quickly - JSON parser for Go
MITSep 16, 2026 · metrics 2.10.0
crates.io
Y2Z/monolith
⬛️ GUI/CLI tool and library for saving complete web pages as a single HTML file
CC0-1.0Oct 8, 2026 · metrics 2.10.0
Go
kubernetes-sigs/kind
Kubernetes IN Docker - local clusters for testing Kubernetes
Apache-2.0Sep 23, 2026 · metrics 2.10.0
PyPI
fabric/fabric
Simple, Pythonic remote execution and deployment.
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
PyPI · crates.io
benfred/py-spy
Sampling profiler for Python programs
MITSep 16, 2026 · metrics 2.10.0
npm
faker-js/faker
Generate massive amounts of fake data in the browser and node.js
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
encode/httpx
A next generation HTTP client for Python. 🦋
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
crates.io
rust-lang/cargo
The Rust package manager
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
exceljs/exceljs
Excel Workbook Manager
MITSep 17, 2026 · metrics 2.10.0
npm
gpujs/gpu.js
GPU Accelerated JavaScript
MITSep 15, 2026 · metrics 2.10.0
Maven
mockito/mockito
Most popular Mocking framework for unit tests written in Java
MITSep 16, 2026 · metrics 2.10.0