Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,682
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
NuGet
JamesNK/Newtonsoft.Json
Json.NET is a popular high-performance JSON framework for .NET
MITOct 20, 2026 · metrics 2.10.0
Go
php/frankenphp
🧟 The modern PHP app server
MITAug 27, 2026 · metrics 2.10.0
npm
egoist/tsup
The simplest and fastest way to bundle your TypeScript libraries.
MITSep 17, 2026 · metrics 2.10.0
npm
GoogleChromeLabs/quicklink
⚡️Faster subsequent page-loads by prefetching in-viewport links during idle time
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
google/go-github
Go library for accessing the GitHub v3 API
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
Go
loft-sh/vcluster
vCluster - Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster. It's cheaper than creating separate full-blown clusters and it offers better multi-tenancy and isolation than regular namespaces.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm · Maven
facebook/hermes
A JavaScript engine optimized for running React Native.
MITAug 27, 2026 · metrics 2.10.0
PyPI
giampaolo/psutil
Cross-platform lib for process and system monitoring in Python
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
dotansimha/graphql-code-generator
A tool for generating code based on a GraphQL schema and GraphQL operations (query/mutation/subscription), with flexible support for custom plugins.
MITAug 27, 2026 · metrics 2.10.0
npm
FormidableLabs/victory
A collection of composable React components for building interactive data visualizations
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI · Go · crates.io
wandb/wandb
The AI developer platform. Use Weights & Biases to train and fine-tune models, and manage models from experimentation to production.
MITAug 27, 2026 · metrics 2.10.0
Go
podman-container-tools/skopeo
Work with remote images registries - retrieving information, images, signing content
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
ds300/patch-package
Fix broken node modules instantly 🏃🏽♀️💨
MITSep 17, 2026 · metrics 2.10.0
—
Cyan4973/xxHash
Extremely fast non-cryptographic hash algorithm
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
nitrojs/nitro
Next Generation Server Toolkit. Create web servers with everything you need and deploy them wherever you prefer.
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
reduxjs/redux-toolkit
The official, opinionated, batteries-included toolset for efficient Redux development
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
Arize-ai/phoenix
AI Observability & Evaluation
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
cytoscape/cytoscape.js
Graph theory (network) library for visualisation and analysis
MITSep 17, 2026 · metrics 2.10.0
npm
material-components/material-web
Material Design Web Components
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
MITSep 16, 2026 · metrics 2.10.0
Go
dexidp/dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Apache-2.0Oct 18, 2026 · metrics 2.10.0
NuGet
tui-cs/Terminal.Gui
Cross Platform Terminal UI toolkit for .NET
MITAug 27, 2026 · metrics 2.10.0
npm
openai/openai-node
Official JavaScript / TypeScript library for the OpenAI API
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
dompdf/dompdf
HTML to PDF converter for PHP
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
PyPI
tweepy/tweepy
Twitter for Python!
MITAug 27, 2026 · metrics 2.10.0
npm
mui/base-ui
Unstyled UI components for building accessible web apps and design systems. From the creators of Radix, Floating UI, and Material UI.
MITOct 18, 2026 · metrics 2.10.0
npm
wojtekmaj/react-pdf
Display PDFs in your React app as easily as if they were images.
MITSep 17, 2026 · metrics 2.10.0
Packagist · npm
octobercms/october
Self-hosted CMS platform based on the Laravel PHP Framework.
Custom licenseAug 27, 2026 · metrics 2.10.0
Packagist
doctrine/lexer
Base library for a lexer that can be used in Top-Down, Recursive Descent Parsers.
MITOct 20, 2026 · metrics 2.10.0
PyPI
OpenByteInc/QuantDinger
AI quantitative trading platform for crypto, stocks, and forex with backtesting, live trading, market data, and multi-agent research.vibe-trading ,trading-agents,ai-trader,ai-trading
Apache-2.0Aug 28, 2026 · metrics 2.10.0