Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,703
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
Automattic/node-canvas
Node canvas is a Cairo backed Canvas implementation for NodeJS.
No licenseOct 23, 2026 · metrics 2.10.0
PyPI
CVHub520/X-AnyLabeling
X-AnyLabeling: A lightweight, efficient, and unified cross-platform desktop application for annotating text, image, video, and multimodal data, combining versatile built-in tools with state-of-the-art AI models and flexible multi-format export.
GPL-3.0Oct 15, 2026 · metrics 2.10.0
npm · PyPI
nodejs/node-gyp
Node.js native addon build tool
MITSep 16, 2026 · metrics 2.10.0
npm
restify/node-restify
The future of Node.js REST development
MITSep 27, 2026 · metrics 2.10.0
PyPI
lucidrains/denoising-diffusion-pytorch
Implementation of Denoising Diffusion Probabilistic Model in Pytorch
MITSep 15, 2026 · metrics 2.10.0
Maven
signalapp/Signal-Server
Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
Packagist
serbanghita/Mobile-Detect
Mobile_Detect is a lightweight PHP class for detecting mobile devices (including tablets). It uses the User-Agent string combined with specific HTTP headers to detect the mobile environment.
MITSep 16, 2026 · metrics 2.10.0
Go
centrifugal/centrifugo
Scalable real-time messaging server in a language-agnostic way. Self-hosted alternative to Pubnub, Pusher, Ably, socket.io, Phoenix.PubSub, SignalR. Set up once and forever.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
benoitc/gunicorn
gunicorn 'Green Unicorn' is a WSGI HTTP Server for UNIX, fast clients and sleepy applications.
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
rq/rq
Simple job queues for Python
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
data-privacy-stack/presidio
An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.
MITAug 27, 2026 · metrics 2.10.0
PyPI
abetlen/llama-cpp-python
Python bindings for llama.cpp
MITOct 20, 2026 · metrics 2.10.0
PyPI · npm
frappe/frappe
Low code web framework for real world applications, in Python and Javascript
MITAug 28, 2026 · metrics 2.10.0
PyPI
mcp-use/mcp-use
The fullstack MCP framework to develop MCP Apps for ChatGPT / Claude & MCP Servers for AI Agents.
MITSep 17, 2026 · metrics 2.10.0
npm
wxt-dev/wxt
⚡ Next-gen Web Extension Framework
MITOct 22, 2026 · metrics 2.10.0
npm
EKKOLearnAI/hermes-studio
Web dashboard for Hermes Agent — multi-platform AI chat, session management, scheduled jobs, usage analytics
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
vercel/micro
Asynchronous HTTP microservices
MITSep 17, 2026 · metrics 2.10.0
npm
VoltAgent/voltagent
AI Agent Engineering Platform built on an Open Source TypeScript AI Agent Framework
MITSep 15, 2026 · metrics 2.10.0
PyPI
autogluon/autogluon
Fast and Accurate ML in 3 Lines of Code
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
facebookresearch/ParlAI
A framework for training and evaluating AI models on a variety of openly available dialogue datasets.
MITOct 18, 2026 · metrics 2.10.0
npm · PyPI
hydra-ecosystem/hydra
Hydra is a framework for elegantly configuring complex applications
MITAug 28, 2026 · metrics 2.10.0
Go
distribution/distribution
The toolkit to pack, ship, store, and deliver container content
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
ArthurSonzogni/FTXUI
:computer: C++ Functional Terminal User Interface. :heart:
MITAug 28, 2026 · metrics 2.10.0
Go
joho/godotenv
A Go port of Ruby's dotenv library (Loads environment variables from .env files)
MITAug 28, 2026 · metrics 2.10.0
npm
protobufjs/protobuf.js
High-performance Protocol Buffers for JavaScript and TypeScript. Conformant through Edition 2026, and unusually versatile. No protoc required.
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
pymupdf/PyMuPDF
PyMuPDF is a high performance Python library for data extraction, analysis, conversion & manipulation of PDF (and other) documents.
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
PyPI
blacklanternsecurity/bbot
The recursive internet scanner for hackers. 🧡
AGPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
gka/chroma.js
JavaScript library for all kinds of color manipulations
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
getlago/lago
Open Source Metering and Usage Based Billing API ⭐️ Consumption tracking, Subscription management, Pricing iterations, Payment orchestration & Revenue analytics
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
prompt-toolkit/python-prompt-toolkit
Library for building powerful interactive command line applications in Python
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0