Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,719
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
libgit2/libgit2
A cross-platform, linkable library implementation of Git that you can use in your application.
Custom licenseAug 28, 2026 · metrics 2.10.0
crates.io
foundry-rs/foundry
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
oramasearch/orama
🌌 A complete search engine and RAG pipeline in your browser, server or edge network with support for full-text, vector, and hybrid search in less than 2kb.
Custom licenseSep 26, 2026 · metrics 2.10.0
npm
MudBlazor/MudBlazor
Blazor Component Library based on Material Design principles. Do more with Blazor, utilizing CSS and keeping JavaScript to a bare minimum.
MITAug 28, 2026 · metrics 2.10.0
PyPI · crates.io · Go +2
github/copilot-sdk
Multi-platform SDK for integrating GitHub Copilot Agent into apps and services
MITOct 20, 2026 · metrics 2.10.0
PyPI
pyannote/pyannote-audio
Neural building blocks for speaker diarization: speech activity detection, speaker change detection, overlapped speech detection, speaker embedding
MITSep 17, 2026 · metrics 2.10.0
Maven
google/auto
A collection of source code generators for Java.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · npm
a-h/templ
A language for writing HTML user interfaces in Go.
MITSep 23, 2026 · metrics 2.10.0
PyPI
facebookresearch/xformers
Hackable and optimized Transformers building blocks, supporting a composable construction.
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven
recloudstream/cloudstream
Android app for streaming and downloading media.
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Maven
Activiti/Activiti
Activiti is a light-weight workflow and Business Process Management (BPM) Platform targeted at business people, developers and system admins. Its core is a super-fast and rock-solid BPMN 2 process engine for Java. It's open-source and distributed under the Apache license. Activiti runs in any Java application, on a server, on a cluster or in the cloud. It integrates perfectly with Spring, it is extremely lightweight and based on simple concepts.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
amueller/word_cloud
A little word cloud generator in Python
MITAug 28, 2026 · metrics 2.10.0
Go
kedacore/keda
KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Packagist · npm
woocommerce/woocommerce
A customizable, open-source ecommerce platform built on WordPress. Build any commerce solution you can imagine.
Custom licenseSep 15, 2026 · metrics 2.10.0
crates.io
hatoo/oha
Ohayou(おはよう), HTTP load generator, inspired by rakyll/hey with tui animation.
MITAug 28, 2026 · metrics 2.10.0
npm
reactstrap/reactstrap
Simple React Bootstrap 5 components
MITOct 17, 2026 · metrics 2.10.0
npm
unovue/shadcn-vue
Vue port of shadcn-ui
MITAug 28, 2026 · metrics 2.10.0
PyPI
vega/altair
Declarative visualization library for Python
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
npm
Turfjs/turf
A modular geospatial engine written in JavaScript and TypeScript
MITSep 17, 2026 · metrics 2.10.0
npm
ckeditor/ckeditor5
Powerful rich text editor framework with a modular architecture, modern integrations, and features like collaborative editing.
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
evershopcommerce/evershop
🛍️ Typescript E-commerce Platform
GPL-3.0Sep 15, 2026 · metrics 2.10.0
crates.io
rust-bakery/nom
Rust parser combinator framework
MITSep 16, 2026 · metrics 2.10.0
PyPI
ollama/ollama-python
Ollama Python library
MITAug 28, 2026 · metrics 2.10.0
npm
easydiffusion/easydiffusion
An easy 1-click way to create beautiful artwork on your PC using AI, with no tech knowledge. Provides a browser UI for generating images from text prompts and images. Just enter your text prompt, and see the generated image.
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
sourcegraph/conc
Better structured concurrency for go
MITAug 28, 2026 · metrics 2.10.0
Packagist
rectorphp/rector
Instant Upgrades and Automated Refactoring of any PHP 5.3+ code
MITSep 21, 2026 · metrics 2.10.0
npm
vanilla-extract-css/vanilla-extract
Zero-runtime Stylesheets-in-TypeScript
MITAug 28, 2026 · metrics 2.10.0
npm
NapNeko/NapCatQQ
Modern protocol-side framework based on NTQQ
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist
php-fig/log
No repository description published.
MITOct 20, 2026 · metrics 2.10.0
PyPI
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Apache-2.0Sep 17, 2026 · metrics 2.10.0