Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,127
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm · PyPI
samuelgursky/davinci-resolve-mcp
MCP server integration for DaVinci Resolve Studio
MITSep 6, 2026 · metrics 2.10.0
Maven
hapifhir/hapi-fhir
🔥 HAPI FHIR - Java API for HL7 FHIR Clients and Servers
Apache-2.0Sep 2, 2026 · metrics 2.10.0
npm · crates.io
drl990114/MarkFlowy
AI-powered cross-platform editor for WYSIWYG Markdown and general-purpose text editing.
AGPL-3.0Sep 5, 2026 · metrics 2.10.0
npm · crates.io
vercel/workflow
Workflow SDK: Build durable, reliable, and observable apps and AI Agents in TypeScript
Apache-2.0Sep 6, 2026 · metrics 2.10.0
crates.io · npm · PyPI
raine/workmux
git worktrees + tmux windows for zero-friction parallel dev
MITSep 5, 2026 · metrics 2.10.0
Go · npm
beenuar/AiSOC
Open-source AI-powered Security Operations Center — alert fusion, purple-team drills, agent-assisted triage, MITRE ATT&CK investigation. MIT-licensed, self-hostable.
MITSep 5, 2026 · metrics 2.10.0
crates.io
zhiburt/tabled
An easy to use library for pretty print tables of Rust structs and enums.
MITSep 6, 2026 · metrics 2.10.0
crates.io · npm
modrinth/code
The Modrinth monorepo containing all code which powers Modrinth!
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
samanhappy/mcphub
Self-hosted MCP gateway and management platform for connecting, managing, and operating MCP servers.
Apache-2.0Sep 2, 2026 · metrics 2.10.0
RubyGems
david942j/one_gadget
The best tool for finding one gadget RCE in libc.so.6
MITSep 5, 2026 · metrics 2.10.0
npm
ProjectOpenSea/opensea-sdk
TypeScript SDK for the OpenSea marketplace
MITSep 6, 2026 · metrics 2.10.0
npm · PyPI
frappe/builder
Craft beautiful websites effortlessly with an intuitive visual builder and publish them instantly
MITSep 6, 2026 · metrics 2.10.0
npm
Unity-Technologies/com.unity.netcode.gameobjects
Netcode for GameObjects is a high-level netcode SDK that provides networking capabilities to GameObject/MonoBehaviour workflows within Unity and sits on top of underlying transport layer.
Custom licenseSep 3, 2026 · metrics 2.10.0
Packagist
rap2hpoutre/fast-excel
🦉 Fast Excel import/export for Laravel
MITSep 5, 2026 · metrics 2.10.0
PyPI
sevagas/macro_pack
macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for pentest, demo, and social engineering assessments. The goal of macro_pack is to simplify exploitation, antimalware bypass, and automatize the process from malicious macro and script generation to final document generation. It also provides a lot of helpful features useful for redteam or security research.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
Azure/azure-sdk-for-js
This repository is for active development of the Azure SDK for JavaScript (NodeJS & Browser). For consumers of the SDK we recommend visiting our public developer docs at https://docs.microsoft.com/javascript/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-js.
MITSep 5, 2026 · metrics 2.10.0
Packagist · npm
tempestphp/tempest-framework
The PHP framework that gets out of your way
MITSep 6, 2026 · metrics 2.10.0
Maven
varabyte/kobweb
A modern framework for full stack web apps in Kotlin, built upon Compose HTML
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Packagist
infection/infection
PHP Mutation Testing library
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
npm
Teradata/covalent
Covalent - A Design System for Teradata
MITSep 5, 2026 · metrics 2.10.0
Packagist · npm
dedoc/scramble
Modern Laravel OpenAPI (Swagger) documentation generator. No PHPDoc annotations required.
MITSep 5, 2026 · metrics 2.10.0
Packagist
php-rdkafka/php-rdkafka
Production-ready, stable Kafka client for PHP
MITSep 3, 2026 · metrics 2.10.0
Go
stripe/stripe-cli
A command-line tool for Stripe
Apache-2.0Sep 5, 2026 · metrics 2.10.0
NuGet
Particular/NServiceBus
The gold standard for async .NET microservices on Azure, AWS and on-prem
Custom licenseSep 3, 2026 · metrics 2.10.0
npm
ipfs/ipfs-companion
Browser extension that routes ipfs:// addresses and content-addressed websites through your own local IPFS node
CC0-1.0Sep 1, 2026 · metrics 2.10.0
Go
idursun/jjui
jjui is a TUI designed for interacting with the Jujutsu version control system.
MITAug 30, 2026 · metrics 2.10.0
Go
grafana/beyla
eBPF-based autoinstrumentation of web applications and network metrics
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
Shopify/hydrogen
Hydrogen lets you build faster headless storefronts in less time, on Shopify.
MITSep 5, 2026 · metrics 2.10.0
Go · npm
thomaspoignant/go-feature-flag
GO Feature Flag is a simple, complete and lightweight self-hosted cloud native feature flag solution 100% Open Source — built on OpenFeature 🎛️
MITSep 5, 2026 · metrics 2.10.0
PyPI
HUANGCHIHHUNGLeo/claude-real-video
Let Claude (or any LLM) actually watch a video — scene-aware, deduplicated frames + transcript, from a URL or local file. Runs locally, MIT.
MITAug 31, 2026 · metrics 2.10.0