Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,719
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
katspaugh/wavesurfer.js
Audio waveform player
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
Stuk/jszip
Create, read and edit .zip files with Javascript
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist · npm
w7corp/easywechat
📦 一个 PHP 微信 SDK
MITAug 28, 2026 · metrics 2.10.0
Go
velero-io/velero
Backup and migrate Kubernetes applications and their persistent volumes
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm · Hex
electric-sql/electric
The agent platform built on sync.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
hackjutsu/Lepton
💻 Democratizing Snippet Management (macOS/Win/Linux)
MITSep 19, 2026 · metrics 2.10.0
Packagist
nextcloud/all-in-one
📦 The official Nextcloud installation method. Provides easy deployment and maintenance with most features included in this one Nextcloud instance.
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
containerd/nerdctl
contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
NVIDIA/cutlass
CUDA Templates and Python DSLs for High-Performance Linear Algebra
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
projectdiscovery/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
MITAug 28, 2026 · metrics 2.10.0
npm
DouyinFE/semi-design
🚀A modern, comprehensive, flexible design system and React UI library, AI-friendly built-in.🎨Provide 3000+ Design Tokens, easy to build your design system. Make Semi Design to Any Design.🧑🏻💻 Design to Code in one click
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
raineorshine/npm-check-updates
Find newer versions of package dependencies than what your package.json allows
Apache-2.0Oct 22, 2026 · metrics 2.10.0
—
helloianneo/ian-xiaohei-illustrations
中文小黑怪诞正文配图生成 Skill | 16:9 白底手绘 | 少量红橙蓝批注 | Codex Skill
MITAug 28, 2026 · metrics 2.10.0
Go
noisetorch/NoiseTorch
Real-time microphone noise suppression on Linux.
Custom licenseAug 28, 2026 · metrics 2.10.0
npm · PyPI
polarsource/polar
Polar — A billing platform for the intelligence era
Apache-2.0Sep 30, 2026 · metrics 2.10.0
npm · Packagist
invoiceninja/invoiceninja
A source-available invoice, quote, project and time-tracking app built with Laravel
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
astrid-runtime/astrid
Astrid is a portable, capability-secure operating system for composable software.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
Netflix/metaflow
Build, Manage and Deploy AI/ML Systems
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
pypa/pip
The Python package installer
MITAug 28, 2026 · metrics 2.10.0
Go · npm
chaitin/PandaWiki
PandaWiki 是一款 AI 大模型驱动的开源知识库搭建系统，帮助你快速构建智能化的 产品文档、技术文档、FAQ、博客系统，借助大模型的力量为你提供 AI 创作、AI 问答、AI 搜索等能力。
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
NuGet
cefsharp/CefSharp
.NET (WPF and Windows Forms) bindings for the Chromium Embedded Framework
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
aandrew-me/ytDownloader
Desktop app to download audio/video from hundreds of sites
GPL-3.0Aug 28, 2026 · metrics 2.10.0
PyPI
snakers4/silero-vad
Silero VAD: pre-trained enterprise-grade Voice Activity Detector
MITSep 17, 2026 · metrics 2.10.0
Packagist
phpredis/phpredis
A PHP extension for Redis
Custom licenseAug 28, 2026 · metrics 2.10.0
—
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm · RubyGems
Freika/dawarich
Your favorite self-hostable alternative to Google Timeline (Google Location History)
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
npm
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
moby/buildkit
concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · npm
axllent/mailpit
An email and SMTP testing tool with API for developers
MITAug 28, 2026 · metrics 2.10.0
NuGet · PyPI
LuckyPennySoftware/AutoMapper
A convention-based object-object mapper in .NET.
Custom licenseSep 19, 2026 · metrics 2.10.0