Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,602
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
spatie/laravel-permission
Associate users with roles and permissions
MITOct 20, 2026 · metrics 2.10.0
Maven · npm
langchain4j/langchain4j
LangChain4j is an idiomatic, open-source Java library for building LLM-powered applications on the JVM. It offers a unified API over popular LLM providers and vector stores, and makes implementing tool calling (including MCP support), agents and RAG easy. It integrates seamlessly with enterprise Java frameworks like Quarkus and Spring Boot.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
dip/cmdk
Fast, unstyled command menu React component.
MITSep 17, 2026 · metrics 2.10.0
PyPI
neuml/txtai
💡 All-in-one AI framework for semantic search, LLM orchestration and language model workflows
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
seleniumbase/SeleniumBase
📊 APIs for web automation, testing, and bypassing bot-detection.
MITAug 27, 2026 · metrics 2.10.0
PyPI
pypa/pipx
Install and Run Python Applications in Isolated Environments
MITAug 27, 2026 · metrics 2.10.0
npm
taye/interact.js
JavaScript drag and drop, resizing and multi-touch gestures with inertia and snapping for modern browsers (and also IE9+)
MITOct 22, 2026 · metrics 2.10.0
npm
graphile/crystal
🔮 Graphile's Crystal Monorepo; home to Grafast, PostGraphile, pg-introspection, pg-sql2 and much more!
MITOct 20, 2026 · metrics 2.10.0
—
vnotex/vnote
A pleasant note-taking platform in native C++.
LGPL-3.0Aug 27, 2026 · metrics 2.10.0
RubyGems
rubocop/rubocop
A Ruby static code analyzer and formatter, based on the community Ruby style guide.
MITOct 18, 2026 · metrics 2.10.0
npm
wechat-article/wechat-article-exporter
一款在线的 微信公众号文章批量下载 工具，支持导出阅读量与评论数据，无需搭建任何环境，可通过 在线网站 使用，支持 docker 私有化部署和 Cloudflare 部署。 支持下载各种文件格式，其中 HTML 格式可100%还原文章排版与样式。
MITSep 16, 2026 · metrics 2.10.0
npm · crates.io · PyPI
run-llama/liteparse
A fast, helpful, and open-source document parser
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
XiaomiMiMo/MiMo-Code
MiMo Code: Where Models and Agents Co-Evolve
MITAug 27, 2026 · metrics 2.10.0
npm
aws/aws-cdk
The AWS Cloud Development Kit is a framework for defining cloud infrastructure in code
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm · crates.io
web-infra-dev/rspack
Fast Rust-based bundler for the web with a modernized webpack API 🦀
MITAug 27, 2026 · metrics 2.10.0
Packagist · npm
star7th/showdoc
ShowDoc is a tool greatly applicable for an IT team to share documents online一个非常适合IT团队的在线API文档、技术文档工具
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI · Maven · npm
datahub-project/datahub
The Context Platform for your Data and AI Stack
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
MITAug 27, 2026 · metrics 2.10.0
Go
cloudwego/eino
The ultimate LLM/AI application development framework in Go.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven · npm
codecentric/spring-boot-admin
Admin UI for administration of spring boot applications
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
Portkey-AI/gateway
A blazing fast AI Gateway with integrated guardrails. Route to 1,600+ LLMs, 50+ AI Guardrails with 1 fast & friendly API.
MITAug 27, 2026 · metrics 2.10.0
PyPI
ultrafunkamsterdam/undetected-chromedriver
Custom Selenium Chromedriver | Zero-Config | Passes ALL bot mitigation systems (like Distil / Imperva/ Datadadome / CloudFlare IUAM)
GPL-3.0Sep 17, 2026 · metrics 2.10.0
PyPI
citusdata/citus
Distributed PostgreSQL as an extension
AGPL-3.0Oct 20, 2026 · metrics 2.10.0
—
zealdocs/zeal
Offline documentation browser. Your personal reference library, searchable in an instant.
GPL-3.0Sep 27, 2026 · metrics 2.10.0
Maven · npm
apache/zookeeper
Apache ZooKeeper
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
octalmage/robotjs
Node.js Desktop Automation.
MITSep 16, 2026 · metrics 2.10.0
—
dotnet/coreclr
CoreCLR is the runtime for .NET Core. It includes the garbage collector, JIT compiler, primitive data types and low-level classes.
No licenseAug 27, 2026 · metrics 2.10.0
Maven
Netflix/eureka
AWS Service registry for resilient mid-tier load balancing and failover.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
seerr-team/seerr
Open-source media request and discovery manager for Jellyfin, Plex, and Emby.
MITSep 29, 2026 · metrics 2.10.0