Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,545
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
sml2h3/ddddocr
带带弟弟 通用验证码识别OCR pypi版
MITSep 17, 2026 · metrics 2.10.0
crates.io · npm · RubyGems
Automattic/harper
Offline, privacy-first grammar checker. Fast, open-source, Rust-powered
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm · crates.io
formatjs/formatjs
The monorepo home to all of the FormatJS related libraries, most notably react-intl.
No licenseAug 27, 2026 · metrics 2.10.0
PyPI
aleju/imgaug
Image augmentation for machine learning experiments.
MITSep 17, 2026 · metrics 2.10.0
npm
lint-staged/lint-staged
🚫💩 — Run tasks like formatters and linters against staged git files
MITSep 16, 2026 · metrics 2.10.0
PyPI
bulletphysics/bullet3
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
vuejs/pinia
🍍 Intuitive, type safe, light and flexible Store for Vue using the composition api with DevTools support
MITSep 17, 2026 · metrics 2.10.0
npm
web-infra-dev/midscene
GUI Agent for E2E Testing
MITAug 27, 2026 · metrics 2.10.0
PyPI
nltk/nltk
NLTK Source
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
Tonejs/Tone.js
A Web Audio framework for making interactive music in the browser.
MITAug 27, 2026 · metrics 2.10.0
PyPI
optuna/optuna
A hyperparameter optimization framework
MITAug 27, 2026 · metrics 2.10.0
PyPI · npm
google-deepmind/mujoco
Multi-Joint dynamics with Contact. A general purpose physics simulator.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
—
OpenVPN/openvpn
OpenVPN is an open source VPN daemon
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI · npm
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
eclipse-vertx/vert.x
Vert.x is a tool-kit for building reactive applications on the JVM
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
electron-userland/electron-builder
A complete solution to package and build a ready for distribution Electron app with “auto update” support out of the box
MITSep 16, 2026 · metrics 2.10.0
npm
jimp-dev/jimp
An image processing library written entirely in JavaScript for Node, with zero external or native dependencies.
MITSep 17, 2026 · metrics 2.10.0
—
boltdb/bolt
An embedded key/value database for Go.
MITSep 30, 2026 · metrics 2.10.0
npm
millionco/react-doctor
Your agent writes bad React. This catches it
Custom licenseAug 27, 2026 · metrics 2.10.0
Go
projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
MITOct 19, 2026 · metrics 2.10.0
Maven
kekingcn/kkFileView
Universal File Online Preview Project based on Spring-Boot
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
logto-io/logto
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · npm
LemmyNet/lemmy
🐀 A decentralised discussion platform for communities.
AGPL-3.0Aug 27, 2026 · metrics 2.10.0
RubyGems
scala/scala
Scala 2 compiler and standard library. Scala 2 bugs at https://github.com/scala/bug; Scala 3 at https://github.com/scala/scala3
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
ktorio/ktor
Framework for quickly creating connected applications in Kotlin with minimal effort
Apache-2.0Oct 20, 2026 · metrics 2.10.0
RubyGems
basecamp/kamal
Deploy web apps anywhere.
MITAug 27, 2026 · metrics 2.10.0
PyPI · npm
visgl/deck.gl
WebGL2 powered visualization framework
MITAug 27, 2026 · metrics 2.10.0
Go
panjf2000/ants
🐜🐜🐜 ants is the most powerful and reliable pooling solution for Go.
MITSep 23, 2026 · metrics 2.10.0
PyPI
gunthercox/ChatterBot
ChatterBot is a machine learning, conversational dialog engine for creating chat bots
BSD-3-ClauseAug 25, 2026 · metrics 2.10.0
Go
benbjohnson/litestream
Streaming replication for SQLite.
Apache-2.0Oct 19, 2026 · metrics 2.10.0