Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,665
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
stylelint/stylelint
A mighty CSS linter that helps you avoid errors and enforce conventions.
MITAug 27, 2026 · metrics 2.10.0
npm
yargs/yargs
yargs the modern, pirate-themed successor to optimist.
MITSep 18, 2026 · metrics 2.10.0
RubyGems · PyPI
jordansissel/fpm
Effing package management! Build packages for multiple platforms (deb, rpm, etc) with great ease and sanity.
Custom licenseAug 27, 2026 · metrics 2.10.0
Go
majd/ipatool
Command-line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages.
MITOct 5, 2026 · metrics 2.10.0
NuGet
dotnet/BenchmarkDotNet
Powerful .NET library for benchmarking
MITAug 27, 2026 · metrics 2.10.0
PyPI · npm · crates.io +1
lancedb/lancedb
Developer-friendly OSS embedded retrieval library for multimodal AI. Search More; Manage Less.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI · npm
simonw/datasette
An open source multi-tool for exploring and publishing data
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
pressly/goose
A database migration tool. Supports SQL migrations and Go functions.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
maplibre/maplibre-gl-js
MapLibre GL JS - Interactive vector tile maps in the browser
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
debug-js/debug
A tiny JavaScript debugging utility modelled after Node.js core's debugging technique. Works in Node.js and web browsers
MITOct 21, 2026 · metrics 2.10.0
npm
acornjs/acorn
A small, fast, JavaScript-based JavaScript parser
No licenseSep 16, 2026 · metrics 2.10.0
—
jrouwe/JoltPhysics
A multi core friendly rigid body physics and collision detection library. Written in C++. Suitable for games and VR applications. Used by Horizon Forbidden West and Death Stranding 2.
MITAug 27, 2026 · metrics 2.10.0
npm
mozilla/readability
A standalone version of the readability lib
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
mixmark-io/turndown
🛏 An HTML to Markdown converter written in JavaScript
MITSep 17, 2026 · metrics 2.10.0
npm · Go
corsairdev/corsair
Connect your users to their apps
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
WhiskeySockets/Baileys
Socket-based TS/JavaScript API for WhatsApp Web
MITOct 21, 2026 · metrics 2.10.0
Go
bufbuild/buf
The best way of working with Protocol Buffers.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
jhy/jsoup
jsoup: the Java HTML parser, built for HTML editing, cleaning, scraping, and XSS safety.
MITAug 27, 2026 · metrics 2.10.0
Go · crates.io · npm
TencentCloud/CubeSandbox
Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
toss/es-toolkit
A modern JavaScript utility library that's 2-3 times faster and up to 97% smaller, a major upgrade to lodash.
MITOct 20, 2026 · metrics 2.10.0
PyPI · crates.io · npm
rerun-io/rerun
Visualize, query, and stream to train on multimodal robotics data.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
apereo/cas
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
Vanessa219/vditor
♏ 一款浏览器端的 Markdown 编辑器，支持所见即所得（富文本）、即时渲染（类似 Typora）和分屏预览模式。An In-browser Markdown editor, support WYSIWYG (Rich Text), Instant Rendering (Typora-like) and Split View modes.
MITOct 5, 2026 · metrics 2.10.0
Maven
ssssssss-team/spider-flow
新一代爬虫平台，以图形化方式定义爬虫流程，不写代码即可完成爬虫。
MITAug 27, 2026 · metrics 2.10.0
PyPI
kornia/kornia
🐍 Geometric Computer Vision Library for Spatial AI
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
doctrine/inflector
Doctrine Inflector is a small library that can perform string manipulations with regard to uppercase/lowercase and singular/plural forms of words.
MITOct 20, 2026 · metrics 2.10.0
npm
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
MITSep 17, 2026 · metrics 2.10.0
npm
vercel-labs/portless
Replace port numbers with stable, named local URLs. For humans and agents.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm · crates.io
perspective-dev/perspective
A data visualization and analytics component, especially well-suited for large and/or streaming datasets.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
holaboss-ai/holaOS
Open-source agentic workspace enterprises can make their own. Connect the systems you already run — 100+ integrations, MCP, chat tools, apps, browser, local files — with shared memory. Any agent (Claude Code, Codex), any model, or BYOK. Set up in clicks, not months. Local-first: your data never leaves your machines.
Custom licenseSep 18, 2026 · metrics 2.10.0