Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,267
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI
facebookresearch/ParlAI
A framework for training and evaluating AI models on a variety of openly available dialogue datasets.
MITOct 18, 2026 · metrics 2.10.0
PyPI · crates.io · Go +2
github/copilot-sdk
Multi-platform SDK for integrating GitHub Copilot Agent into apps and services
MITOct 20, 2026 · metrics 2.10.0
npm
reactstrap/reactstrap
Simple React Bootstrap 5 components
MITOct 17, 2026 · metrics 2.10.0
Packagist
php-fig/log
No repository description published.
MITOct 20, 2026 · metrics 2.10.0
Go
velero-io/velero
Backup and migrate Kubernetes applications and their persistent volumes
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
raineorshine/npm-check-updates
Find newer versions of package dependencies than what your package.json allows
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm · Packagist
invoiceninja/invoiceninja
A source-available invoice, quote, project and time-tracking app built with Laravel
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
pmndrs/drei
🥉 useful helpers for react-three-fiber
MITOct 22, 2026 · metrics 2.10.0
Packagist
kanboard/kanboard
Kanban project management software
MITOct 22, 2026 · metrics 2.10.0
Go
google/go-cloud
The Go Cloud Development Kit (Go CDK): A library and tools for open cloud development in Go.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Packagist
bobthecow/psysh
A REPL for PHP
MITOct 20, 2026 · metrics 2.10.0
NuGet · npm
restsharp/RestSharp
Simple REST and HTTP API Client for .NET
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go · Maven · npm
spinnaker/spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Packagist
symfony/console
Eases the creation of beautiful and testable command line interfaces
MITOct 20, 2026 · metrics 2.10.0
Packagist
googleapis/google-api-php-client
A PHP client library for accessing Google APIs
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
etcd-io/bbolt
An embedded key/value database for Go.
MITOct 21, 2026 · metrics 2.10.0
PyPI
FluentValidation/FluentValidation
A popular .NET validation library for building strongly-typed validation rules.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI · npm
NVIDIA/garak
the LLM vulnerability scanner
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
MakazhanAlpamys/Soup
Fine-tune LLMs from one YAML. Layer streaming trains an 8B model on a 4 GB laptop GPU.
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Maven
spring-projects/spring-ai
An Application Framework for AI Engineering
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
openclaw/clawhub
Skill + Plugin Registry for OpenClaw
MITOct 18, 2026 · metrics 2.10.0
Go
goplus/xgo
XGo is a programming language that reads like plain English. But it's also incredibly powerful — it lets you leverage assets from C/C++, Go, Python, and JavaScript/TypeScript, creating a unified software engineering ecosystem. Our vision is to enable everyone to become a builder of the world.
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · Packagist · crates.io +1
xberg-io/xberg
Polyglot document intelligence with a Rust core: extract text, metadata, images, tables, and structured data from 106 formats across 140 file extensions, plus code intelligence for 371 languages. Fifteen bindings, with CLI, REST API, and MCP server.
MITOct 18, 2026 · metrics 2.10.0
npm · Go
nhost/nhost
The Open Source Firebase Alternative with GraphQL.
MITOct 22, 2026 · metrics 2.10.0
Packagist · npm
pterodactyl/panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io · npm
max-sixty/worktrunk
Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
google/pprof
pprof is a tool for visualization and analysis of profiling data
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Maven
JetBrains/Exposed
Kotlin SQL Framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io · npm
wasm-bindgen/wasm-bindgen
Facilitating high-level interactions between Wasm modules and JavaScript
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
heyform/heyform
Open-Source Form Builder
AGPL-3.0Oct 19, 2026 · metrics 2.10.0