Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,737
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
go-swagger/go-swagger
Swagger 2.0 implementation for go
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
ruby-grape/grape
An opinionated framework for creating REST-like APIs in Ruby.
MITAug 28, 2026 · metrics 2.10.0
PyPI
Flowseal/tg-ws-proxy
Local MTProto proxy server for partial bypassing of Telegram loading
MITSep 20, 2026 · metrics 2.10.0
Packagist
php-fig/container
No repository description published.
MITOct 24, 2026 · metrics 2.10.0
PyPI · npm
BYVoid/OpenCC
Library for conversion between Traditional and Simplified Chinese
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
StylishThemes/GitHub-Dark
:octocat: Dark GitHub style
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
Go
prometheus-operator/prometheus-operator
Prometheus Operator creates/configures/manages Prometheus clusters atop Kubernetes
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
yzhao062/pyod
A Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 60+ detectors, benchmark-backed ADEngine orchestration, and an agentic workflow for AI agents.
BSD-2-ClauseAug 27, 2026 · metrics 2.10.0
npm · PyPI
microsoft/vscode-copilot-chat
Copilot Chat extension for VS Code
MITAug 28, 2026 · metrics 2.10.0
npm
keystonejs/keystone
The superpowered headless CMS for Node.js — built with GraphQL and React
MITAug 28, 2026 · metrics 2.10.0
—
ykdojo/claude-code-tips
45+ tips for getting the most out of Claude Code, from basics to advanced - includes a custom status line script and Claude Code running itself in a container. Also includes the dx plugin: skills for everyday dev workflows.
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
lib/pq
Go PostgreSQL driver for database/sql
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
HMCL-dev/HMCL
A Minecraft Launcher which is multi-functional, cross-platform and popular
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Maven
xuchengsheng/spring-reading
涵盖了 Spring 框架的核心概念和关键功能，包括控制反转（IOC）容器的使用，面向切面编程（AOP）的原理与实践，事务管理的方式与实现，Spring MVC 的流程与控制器工作机制，以及 Spring 中数据访问、安全、Boot 自动配置等方面的深入研究。此外，它还包含了 Spring 事件机制的应用、高级主题如缓存抽象和响应式编程，以及对 Spring 源码的编程风格与设计模式的深入探讨。
MITAug 28, 2026 · metrics 2.10.0
Packagist
kanboard/kanboard
Kanban project management software
MITOct 22, 2026 · metrics 2.10.0
Go
google/go-cloud
The Go Cloud Development Kit (Go CDK): A library and tools for open cloud development in Go.
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
playcanvas/supersplat
3D Gaussian Splat Editor
MITAug 28, 2026 · metrics 2.10.0
PyPI · crates.io · npm
open-jarvis/OpenJarvis
Personal AI, On Personal Devices
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
boto/boto3
AWS SDK for Python (Boto3)
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
pkgxdev/pkgx
Run Anything
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
vercel/serve
Static file serving and directory listing
MITSep 17, 2026 · metrics 2.10.0
Go
kubernetes/client-go
Go client for Kubernetes.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
VirusTotal/yara
The pattern matching swiss knife
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Maven · PyPI
LaurieWired/GhidraMCP
MCP Server for Ghidra
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
senchalabs/connect
Connect is an extensible HTTP server framework for node using "plugins" known as middleware.
MITSep 17, 2026 · metrics 2.10.0
crates.io
SeaQL/sea-orm
🐚 A powerful relational ORM for Rust
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
hyperdxio/hyperdx
Resolve production issues, fast. An open source observability platform unifying session replays, logs, metrics, traces and errors powered by ClickHouse and OpenTelemetry.
MITAug 28, 2026 · metrics 2.10.0
Go
go-acme/lego
Let's Encrypt/ACME client and library written in Go
MITSep 15, 2026 · metrics 2.10.0
Maven
paascloud/paascloud-master
spring cloud + vue + oAuth2.0全家桶实战，前后端分离模拟商城，完整的购物流程、后端运营平台，可以实现快速搭建企业级微服务项目。支持微信登录等三方登录。
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · crates.io · npm
sqlfluff/sqlfluff
A modular SQL linter and auto-formatter with support for multiple dialects and templated code.
MITAug 28, 2026 · metrics 2.10.0