Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,665
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm · RubyGems
Nozbe/WatermelonDB
🍉 Reactive & asynchronous database for powerful React and React Native apps ⚡️
MITSep 20, 2026 · metrics 2.10.0
npm
notionnext-org/NotionNext
Turn your Notion workspace into a fast, customizable website. Built with Next.js + Notion API, with multi-platform deployment and no self-hosted server required.
MITAug 27, 2026 · metrics 2.10.0
PyPI
pallets/jinja
A very fast and expressive template engine.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Go
go-resty/resty
Simple HTTP, REST, and SSE client library for Go
MITAug 27, 2026 · metrics 2.10.0
npm
jason5ng32/MyIP
The best IP Toolbox. Check your IP address & geolocation, test IP for WebRTC and DNS IP leaks, run an IP quality check, browser fingerprint check, website availability check, network speed test, global latency test, MTR test, Whois search, and more.
MITAug 27, 2026 · metrics 2.10.0
PyPI
streamlink/streamlink
Streamlink is a CLI utility which pipes video streams from various services into a video player
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
Go
charmbracelet/lipgloss
Style definitions for nice terminal layouts 👄
MITAug 27, 2026 · metrics 2.10.0
PyPI
ludwig-ai/ludwig
Low-code framework for building custom LLMs, neural networks, and other AI models
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm · Packagist
WordPress/gutenberg
The Block Editor project for WordPress and beyond. Plugin is available from the official repository.
Custom licenseAug 27, 2026 · metrics 2.10.0
—
libvips/libvips
A fast image processing library with low memory needs.
LGPL-2.1Oct 19, 2026 · metrics 2.10.0
PyPI
fivetran/great_expectations
Always know what to expect from your data.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
qubvel-org/segmentation_models.pytorch
Semantic segmentation models with 500+ pretrained convolutional and transformer-based backbones.
MITSep 17, 2026 · metrics 2.10.0
npm
tachyons-css/tachyons
Functional css for humans
MITSep 15, 2026 · metrics 2.10.0
npm · Go
humanlayer/humanlayer
The best way to get AI coding agents to solve hard problems in complex codebases.
Custom licenseOct 17, 2026 · metrics 2.10.0
PyPI
qutebrowser/qutebrowser
A keyboard-driven, vim-like browser based on Python and Qt.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Packagist
pestphp/pest
The elegant testing framework for PHP developers and AI agents.
MITAug 27, 2026 · metrics 2.10.0
Maven
code4craft/webmagic
A scalable web crawler framework for Java.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
didi/LogicFlow
A flow chart editing framework focus on business customization. 专注于业务自定义的流程图编辑框架，支持实现脑图、ER图、UML、工作流等各种图编辑场景。
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go · npm
grafana/pyroscope
Continuous Profiling Platform. Debug performance issues down to a single line of code
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
crates.io
quickwit-oss/quickwit
Cloud-native OSS search engine for observability
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
IBM/plex
The package of IBM’s typeface, IBM Plex.
OFL-1.1Sep 20, 2026 · metrics 2.10.0
Packagist
egulias/EmailValidator
PHP Email address validator
MITAug 27, 2026 · metrics 2.10.0
npm
NangoHQ/nango
Build product integrations with AI.
Custom licenseAug 27, 2026 · metrics 2.10.0
Maven
newbee-ltd/newbee-mall
🔥 🎉newbee-mall是一套电商系统，包括基础版本(Spring Boot+Thymeleaf)、前后端分离版本(Spring Boot+Vue 3+Element-Plus+Vue-Router 4+Pinia+Vant 4) 、秒杀版本、Go语言版本、微服务版本(Spring Cloud Alibaba+Nacos+Sentinel+Seata+Spring Cloud Gateway+OpenFeign+ELK)。 前台商城系统包含首页门户、商品分类、新品上线、首页轮播、商品推荐、商品搜索、商品展示、购物车、订单结算、订单流程、个人订单管理、会员中心、帮助中心等模块。 后台管理系统包含数据面板、轮播图管理、商品管理、订单管理、会员管理、分类管理、设置等模块。
GPL-3.0Aug 27, 2026 · metrics 2.10.0
PyPI
esphome/esphome
ESPHome is a system to control your ESP32, ESP8266, BK72xx, RP2040 by simple yet powerful configuration files and control them remotely through Home Automation systems.
Custom licenseAug 27, 2026 · metrics 2.10.0
NuGet
spectreconsole/spectre.console
A .NET library that makes it easier to create beautiful console applications.
MITAug 27, 2026 · metrics 2.10.0
PyPI
statsmodels/statsmodels
Statsmodels: statistical modeling and econometrics in Python
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
Packagist
walkor/workerman
An asynchronous event driven PHP socket framework. Supports HTTP, Websocket, SSL and other custom protocols.
MITSep 18, 2026 · metrics 2.10.0
npm
gcanti/fp-ts
Functional programming in TypeScript
MITSep 17, 2026 · metrics 2.10.0
NuGet
chocolatey/choco
Chocolatey - the package manager for Windows
Custom licenseOct 19, 2026 · metrics 2.10.0