Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,754
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
sindresorhus/ora
Elegant terminal spinner
MITSep 16, 2026 · metrics 2.10.0
RubyGems
wpscanteam/wpscan
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com
Custom licenseAug 28, 2026 · metrics 2.10.0
NuGet
bchavez/Bogus
:card_index: A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
Kozea/WeasyPrint
The awesome document factory
BSD-3-ClauseOct 23, 2026 · metrics 2.10.0
PyPI
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
miniflux/v2
Minimalist and opinionated feed reader
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm · RubyGems
activeadmin/activeadmin
The administration framework for Ruby on Rails applications.
MITAug 28, 2026 · metrics 2.10.0
Packagist
doctrine/dbal
Doctrine Database Abstraction Layer
MITOct 24, 2026 · metrics 2.10.0
npm
agenda/agenda
Lightweight job scheduling for Node.js
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
Companion-Inc/feynman
The open source AI research agent.
MITSep 19, 2026 · metrics 2.10.0
NuGet
TechnitiumSoftware/DnsServer
Technitium DNS Server
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Maven
lihengming/spring-boot-api-project-seed
:seedling::rocket:一个基于Spring Boot & MyBatis的种子项目，用于快速构建中小型API、RESTful API项目~
No licenseAug 28, 2026 · metrics 2.10.0
npm
getagentseal/codeburn
Free, local tool to track AI coding token usage and cost across 37 tools and agents (Claude Code, Cursor, Codex, Gemini and more), by model, project, and task. npx codeburn
MITAug 28, 2026 · metrics 2.10.0
npm · crates.io
microsoft/fast
The adaptive interface system for modern web experiences.
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
jeffvli/feishin
A modern self-hosted music player.
GPL-3.0Aug 28, 2026 · metrics 2.10.0
crates.io
bottlerocket-os/bottlerocket
An operating system designed for hosting containers
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
bpmn-io/bpmn-js
A BPMN 2.0 rendering toolkit and web modeler.
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI
xonsh/xonsh
🐚 Python-powered shell. Full-featured, cross-platform and AI-friendly.
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven
perwendel/spark
A simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · npm
awslabs/mcp
Open source MCP Servers for AWS
Apache-2.0Aug 28, 2026 · metrics 2.10.0
NuGet
lepoco/wpfui
WPF UI provides the Fluent experience in your known and loved WPF framework. Intuitive design, themes, navigation and new immersive controls. All natively and effortlessly.
MITSep 16, 2026 · metrics 2.10.0
npm · RubyGems
we-promise/sure
The personal finance app for everyone (by everyone)
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
npm
dicebear/dicebear
DiceBear is an avatar library for designers and developers. 🌍
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
antiwork/gumroad
See what sticks
MITAug 28, 2026 · metrics 2.10.0
npm
pmndrs/use-gesture
👇Bread n butter utility for component-tied mouse/touch gestures in React and Vanilla Javascript.
MITSep 17, 2026 · metrics 2.10.0
Maven · npm
spring-projects/spring-security
Spring Security
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
bluesky-social/atproto
Social networking technology created by Bluesky
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI · npm
NVIDIA/garak
the LLM vulnerability scanner
Apache-2.0Oct 19, 2026 · metrics 2.10.0
NuGet
dotnet/yarp
A toolkit for developing high-performance HTTP reverse proxy applications.
MITAug 28, 2026 · metrics 2.10.0
npm
oclif/oclif
CLI for generating, building, and releasing oclif CLIs. Built by Salesforce.
MITSep 17, 2026 · metrics 2.10.0