Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,768
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
anchore/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
platformio/platformio-core
Your Gateway to Embedded Software Development Excellence :alien:
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
JerBouma/FinanceDatabase
This is a database of 300.000+ symbols containing Equities, ETFs, Funds, Indices, Currencies, Cryptocurrencies and Money Markets.
MITOct 12, 2026 · metrics 2.10.0
npm
swagger-api/swagger-editor
Swagger Editor
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven · RubyGems
bitwarden/android
Bitwarden mobile apps (Password Manager and Authenticator) for Android.
GPL-3.0Oct 7, 2026 · metrics 2.10.0
Maven
json-path/JsonPath
Java JsonPath implementation
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
Oneflow-Inc/oneflow
OneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
Apache-2.0Sep 18, 2026 · metrics 2.10.0
—
Imbad0202/academic-research-skills-codex
Codex-native Academic Research Skills suite for human-in-the-loop academic research workflows
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist
swiftmailer/swiftmailer
Comprehensive mailing tools for PHP
MITSep 18, 2026 · metrics 2.10.0
PyPI
blue-yonder/tsfresh
Automatic extraction of relevant features from time series:
MITSep 17, 2026 · metrics 2.10.0
npm · Packagist · crates.io +1
xberg-io/xberg
Polyglot document intelligence with a Rust core: extract text, metadata, images, tables, and structured data from 106 formats across 140 file extensions, plus code intelligence for 371 languages. Fifteen bindings, with CLI, REST API, and MCP server.
MITOct 18, 2026 · metrics 2.10.0
npm
wonderwhy-er/DesktopCommanderMCP
This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities
MITAug 28, 2026 · metrics 2.10.0
npm
carbon-design-system/carbon
A design system built by IBM
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
withastro/starlight
🌟 Build beautiful, accessible, high-performance documentation websites with Astro
MITOct 9, 2026 · metrics 2.10.0
npm · Go
nhost/nhost
The Open Source Firebase Alternative with GraphQL.
MITOct 22, 2026 · metrics 2.10.0
NuGet
dotnet/machinelearning
ML.NET is an open source and cross-platform machine learning framework for .NET.
MITSep 15, 2026 · metrics 2.10.0
Packagist
phpDocumentor/ReflectionDocBlock
No repository description published.
MITOct 24, 2026 · metrics 2.10.0
Packagist · npm
pterodactyl/panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io · Maven · npm +1
risingwavelabs/risingwave
Event streaming platform for agentic AI. Continuously ingest, transform, and serve event streams in real time, at scale.
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
golang/mock
GoMock is a mocking framework for the Go programming language.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
—
hiddify/Hiddify-Manager
Multi-user anti-filtering panel, with an effortless installation and supporting more than 20 protocols to circumvent filtering plus the telegram proxy.
GPL-3.0Oct 7, 2026 · metrics 2.10.0
npm
pixel-agents-hq/pixel-agents
Pixel office.
MITSep 18, 2026 · metrics 2.10.0
npm
terser/terser
🗜 JavaScript parser, mangler and compressor toolkit for ES6+
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
spyder-ide/spyder
Official repository for Spyder - The Scientific Python Development Environment
MITSep 20, 2026 · metrics 2.10.0
Go
cloudnative-pg/cloudnative-pg
The most popular Kubernetes Operator for PostgreSQL.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io · npm
max-sixty/worktrunk
Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
MITSep 16, 2026 · metrics 2.10.0
npm
Narcooo/inkos
Story Creation AI Agent for novel, scripts, translation, interactive games, and IP content
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
crates.io · npm
tonyantony300/dashbeam
Send files and folders anywhere in the world without storing in cloud - any size, any format, no accounts, no restrictions ( previously Altsendme )
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
—
falcosecurity/falco
Cloud Native Runtime Security
Apache-2.0Aug 28, 2026 · metrics 2.10.0