Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,602
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
objective-see/LuLu
LuLu is the free open-source macOS firewall
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
livekit/agents
A framework for building realtime voice AI agents 🤖🎙️📹
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven · PyPI
CleverRaven/Cataclysm-DDA
Cataclysm - Dark Days Ahead. A turn-based survival game set in a post-apocalyptic world.
Custom licenseSep 20, 2026 · metrics 2.10.0
Maven
trinodb/trino
Official repository of Trino, the distributed SQL query engine for big data, formerly known as PrestoSQL (https://trino.io)
Apache-2.0Aug 27, 2026 · metrics 2.10.0
—
OWASP/mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
CC-BY-SA-4.0Sep 16, 2026 · metrics 2.10.0
Go
gopherjs/gopherjs
A compiler from Go to JavaScript for running Go code in a browser
BSD-2-ClauseAug 27, 2026 · metrics 2.10.0
npm · Maven · RubyGems
wix/react-native-navigation
A complete native navigation solution for React Native
MITSep 15, 2026 · metrics 2.10.0
—
capnproto/capnproto
Cap'n Proto serialization/RPC system - core tools and C++ library
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
pytube/pytube
Lightweight, dependency-free Python library and CLI for downloading YouTube videos, playlists, and captions.
UnlicenseAug 27, 2026 · metrics 2.10.0
npm
anomalyco/opentui
OpenTUI is a library to build terminal user interfaces (TUI)
MITAug 27, 2026 · metrics 2.10.0
npm
mdbootstrap/TW-Elements
𝙃𝙪𝙜𝙚 collection of Tailwind MIT licensed (free) components, sections and templates 😎
MITAug 27, 2026 · metrics 2.10.0
PyPI
microsoft/agent-framework
A framework for building, orchestrating and deploying AI agents and multi-agent workflows with support for Python and .NET.
MITAug 27, 2026 · metrics 2.10.0
npm
nasa/openmct
A web based mission control framework.
Custom licenseSep 29, 2026 · metrics 2.10.0
npm
stenciljs/core
A toolchain for building scalable, enterprise-ready component systems on top of TypeScript and Web Component standards. Stencil components can be distributed natively to React, Angular, Vue, (+ more) and traditional web applications from a single, framework-agnostic codebase.
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
nock/nock
HTTP server mocking and expectations library for Node.js
MITSep 19, 2026 · metrics 2.10.0
npm
TypeStrong/ts-node
TypeScript execution and REPL for node.js
MITSep 17, 2026 · metrics 2.10.0
Maven
macrozheng/mall-swarm
mall-swarm是一套微服务商城系统，采用了 Spring Cloud Alibaba、Spring Boot 3.5、Sa-Token、MyBatis、Elasticsearch、Docker、Kubernetes等核心技术，同时提供了基于Vue的管理后台方便快速搭建系统。mall-swarm在电商业务的基础集成了注册中心、配置中心、监控中心、网关等系统功能。
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
mvt-project/mvt
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
pyinstaller/pyinstaller
Freeze (package) Python programs into stand-alone executables
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
MITSep 20, 2026 · metrics 2.10.0
npm
ixartz/Next-js-Boilerplate
🚀🎉📚 Nextjs Boilerplate and Starter with App Router and Page Router support, Tailwind CSS 4 and TypeScript ⚡️ Made with developer experience first: Next.js 16 + TypeScript + ESLint + Prettier + Drizzle ORM + Husky + Lint-Staged + Vitest + Testing Library + Playwright + Storybook + Commitlint + VSCode + Sentry + PostCSS + Tailwind CSS ✨
MITAug 27, 2026 · metrics 2.10.0
Maven
debezium/debezium
Change data capture for a variety of databases. Please log issues at https://github.com/debezium/dbz/issues.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
swaggo/swag
Automatically generate RESTful API documentation with Swagger 2.0 for Go.
MITOct 21, 2026 · metrics 2.10.0
npm · Packagist
PrismJS/prism
Lightweight, robust, elegant syntax highlighting.
MITSep 17, 2026 · metrics 2.10.0
npm
GoogleChrome/workbox
📦 Workbox: JavaScript libraries for Progressive Web Apps
MITSep 17, 2026 · metrics 2.10.0
Maven
alibaba/COLA
🥤 COLA: Clean Object-oriented & Layered Architecture
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
npm
fuma-nama/fumadocs
The beautiful & flexible React.js docs framework.
MITAug 27, 2026 · metrics 2.10.0
npm
InsForge/InsForge
The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems
capistrano/capistrano
A deployment automation tool built on Ruby, Rake, and SSH.
MITAug 27, 2026 · metrics 2.10.0
npm
emilkowalski/sonner
An opinionated toast component for React.
MITSep 17, 2026 · metrics 2.10.0