Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,642
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
cyrus-and/gdb-dashboard
Modular visual interface for GDB in Python
MITAug 27, 2026 · metrics 2.10.0
npm
atomiks/tippyjs
Tooltip, popover, dropdown, and menu library
MITSep 17, 2026 · metrics 2.10.0
npm
paulmillr/chokidar
Minimal and efficient cross-platform file watching library
MITSep 16, 2026 · metrics 2.10.0
npm
gruntjs/grunt
Grunt: The JavaScript Task Runner
MITOct 21, 2026 · metrics 2.10.0
Go · npm
kubernetes-sigs/kustomize
Customization of kubernetes YAML configurations
Apache-2.0Oct 21, 2026 · metrics 2.10.0
PyPI
FlagOpen/FlagEmbedding
Retrieval and Retrieval-augmented LLMs
MITSep 17, 2026 · metrics 2.10.0
Go · npm
open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI · crates.io · npm
orhun/git-cliff
A highly customizable Changelog Generator that follows Conventional Commit specifications ⛰️
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
jacomyal/sigma.js
A JavaScript library aimed at visualizing graphs of thousands of nodes and edges
MITSep 15, 2026 · metrics 2.10.0
PyPI · npm
marcotcr/lime
Lime: Explaining the predictions of any machine learning classifier
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
spencermountain/compromise
modest natural-language processing
MITAug 27, 2026 · metrics 2.10.0
npm
privatenumber/tsx
⚡️ TypeScript Execute | The easiest way to run TypeScript in Node.js
MITSep 16, 2026 · metrics 2.10.0
PyPI
google/sentencepiece
Unsupervised text tokenizer for Neural Network-based text generation.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
webpro-nl/knip
✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
ISCAug 27, 2026 · metrics 2.10.0
PyPI
sqlalchemy/sqlalchemy
The Database Toolkit for Python
MITAug 27, 2026 · metrics 2.10.0
Maven · PyPI
StarRocks/starrocks
The world's fastest open query engine for sub-second analytics both on and off the data lakehouse. With the flexibility to support nearly any scenario, StarRocks provides best-in-class performance for multi-dimensional analytics, real-time analytics, and ad-hoc queries. A Linux Foundation project.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
git-up/GitUp
The Git interface you've been missing all your life has finally arrived.
GPL-3.0Aug 27, 2026 · metrics 2.10.0
npm
viarotel-org/escrcpy
📱 Display and control your Android device graphically with scrcpy.
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
creativetimofficial/ui
Open-source components, blocks, and AI agents designed to speed up your workflow. Import them seamlessly into your favorite tools through Registry and MCPs.
MITOct 20, 2026 · metrics 2.10.0
npm
expressjs/multer
Node.js middleware for handling `multipart/form-data`.
MITSep 17, 2026 · metrics 2.10.0
npm
listen1/listen1_chrome_extension
one for all free music in china (chrome extension, also works for firefox)
MITAug 27, 2026 · metrics 2.10.0
npm
szimek/signature_pad
HTML5 canvas based smooth signature drawing
MITOct 22, 2026 · metrics 2.10.0
Maven
grpc/grpc-java
The Java gRPC implementation. HTTP/2 based RPC
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
kubeshark/kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet · npm
microsoft/garnet
Garnet is a remote cache-store from Microsoft Research that offers strong performance (throughput and latency), scalability, storage, recovery, cluster sharding, key migration, and replication features. Garnet can work with existing Redis clients.
MITOct 23, 2026 · metrics 2.10.0
npm
wix/Detox
Gray box end-to-end testing and automation framework for mobile apps
MITOct 13, 2026 · metrics 2.10.0
—
lz4/lz4
Extremely Fast Compression algorithm
Custom licenseAug 27, 2026 · metrics 2.10.0
crates.io
GitoxideLabs/gitoxide
An idiomatic, lean, fast & safe pure Rust implementation of Git
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
keplergl/kepler.gl
Kepler.gl is a powerful open source geospatial analysis tool for large-scale data sets.
MITSep 17, 2026 · metrics 2.10.0
PyPI
tadata-org/fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
MITSep 17, 2026 · metrics 2.10.0