Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,703
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
crates.io
fdehau/tui-rs
Build terminal user interfaces and dashboards using Rust
MITSep 19, 2026 · metrics 2.10.0
PyPI
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
monero-project/monero
Monero: the secure, private, untraceable cryptocurrency
Custom licenseSep 20, 2026 · metrics 2.10.0
NuGet
dotnet/orleans
Cloud Native application framework for .NET
MITAug 28, 2026 · metrics 2.10.0
Maven
square/javapoet
A Java API for generating .java source files.
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
cython/cython
The most widely used Python to C compiler
Apache-2.0Aug 28, 2026 · metrics 2.10.0
crates.io
serde-rs/serde
Serialization framework for Rust
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
TykTechnologies/tyk
Tyk Open Source API Gateway written in Go, supporting REST, GraphQL, TCP and gRPC protocols
Custom licenseSep 19, 2026 · metrics 2.10.0
Maven
zfile-dev/zfile
在线云盘、网盘、OneDrive、云存储、私有云、对象存储、h5ai、上传、下载
MITAug 28, 2026 · metrics 2.10.0
Packagist
phalcon/cphalcon
High performance, full-stack PHP framework delivered as a C extension.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Maven
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
MITAug 27, 2026 · metrics 2.10.0
npm
Akryum/vue-virtual-scroller
⚡️ Blazing fast scrolling for any amount of data
No licenseSep 15, 2026 · metrics 2.10.0
—
flame-engine/flame
A Flutter based game engine.
MITOct 23, 2026 · metrics 2.10.0
Maven
microsoft/fluentui-system-icons
Fluent System Icons are a collection of familiar, friendly and modern icons from Microsoft.
MITAug 28, 2026 · metrics 2.10.0
PyPI
Chia-Network/chia-blockchain
Chia blockchain python implementation (full node, farmer, harvester, timelord, and wallet)
Apache-2.0Oct 8, 2026 · metrics 2.10.0
Go
sashabaranov/go-openai
OpenAI, GPT 6.1, GPT-Image-2, Whisper API clients for Go. Zero-dependency.
Apache-2.0Sep 30, 2026 · metrics 2.10.0
Go
fsnotify/fsnotify
Cross-platform filesystem notifications for Go.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm
47ng/nuqs
Type-safe search params state manager for React frameworks - Like useState, but stored in the URL query string.
MITAug 27, 2026 · metrics 2.10.0
npm
modelcontextprotocol/inspector
Visual testing tool for MCP servers
No licenseAug 27, 2026 · metrics 2.10.0
Maven
resilience4j/resilience4j
Resilience4j is a fault tolerance library designed for Java8 and functional programming
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
ChatGPTBox-dev/chatGPTBox
Integrating ChatGPT into your browser deeply, everything you need is here
MITAug 28, 2026 · metrics 2.10.0
Go · npm
99designs/gqlgen
go generate based graphql server library
MITAug 28, 2026 · metrics 2.10.0
PyPI · Go
skypilot-org/skypilot
The AI Compute Platform for frontier teams. SkyPilot turns fragmented AI compute into one AI supercomputer, so frontier AI teams build custom intelligence faster.
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
helmetjs/helmet
Help secure Express apps with various HTTP headers
MITAug 28, 2026 · metrics 2.10.0
Maven
alibaba/spring-ai-alibaba
Agentic AI Framework for Java Developers
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist · PyPI
mockery/mockery
Mockery is a simple yet flexible PHP mock object framework for use in unit testing with PHPUnit, PHPSpec or any other testing framework. Its core goal is to offer a test double framework with a succinct API capable of clearly defining all possible object operations and interactions using a human readable Domain Specific Language (DSL).
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
jantimon/html-webpack-plugin
Simplifies creation of HTML files to serve your webpack bundles
MITSep 18, 2026 · metrics 2.10.0
npm
cobusgreyling/loop-engineering
Practical patterns, starters & CLI tools for loop engineering with AI coding agents. Design systems that prompt and orchestrate agents (inspired by Addy Osmani and Boris Cherny). Includes loop-audit, loop-init, loop-cost.
MITAug 28, 2026 · metrics 2.10.0
npm
foliojs/pdfkit
A JavaScript PDF generation library for Node and the browser
MITSep 17, 2026 · metrics 2.10.0
PyPI
jsvine/pdfplumber
Plumb a PDF for detailed information about each char, rectangle, line, et cetera — and easily extract text and tables.
MITAug 28, 2026 · metrics 2.10.0