Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,789
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
google/pprof
pprof is a tool for visualization and analysis of profiling data
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm · Packagist
linuxserver/Heimdall
An Application dashboard and launcher
MITAug 28, 2026 · metrics 2.10.0
Maven
JetBrains/Exposed
Kotlin SQL Framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
jsx-eslint/eslint-plugin-react
React-specific linting rules for ESLint
MITSep 16, 2026 · metrics 2.10.0
npm
react-grid-layout/react-draggable
React draggable component
MITSep 19, 2026 · metrics 2.10.0
npm
bytedance/xgplayer
A HTML5 video player with a parser that saves traffic
MITAug 28, 2026 · metrics 2.10.0
—
Open-Shell/Open-Shell-Menu
Classic Shell Reborn.
MITAug 28, 2026 · metrics 2.10.0
—
chakra-core/ChakraCore
ChakraCore is an open source Javascript engine with a C API.
MITAug 28, 2026 · metrics 2.10.0
npm
grpc/grpc-web
gRPC for Web Clients
Apache-2.0Sep 29, 2026 · metrics 2.10.0
PyPI
seatgeek/fuzzywuzzy
Fuzzy String Matching in Python
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
garrettj403/SciencePlots
Matplotlib styles for scientific plotting
MITSep 17, 2026 · metrics 2.10.0
Go · npm
OutlineFoundation/outline-apps
Outline Client and Manager, developed by Jigsaw. Outline Manager makes it easy to create your own VPN server. Outline Client lets you share access to your VPN with anyone in your network, giving them access to the free and open internet.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
—
leanprover/lean4
Lean 4 programming language and theorem prover
Apache-2.0Sep 21, 2026 · metrics 2.10.0
RubyGems
imathis/octopress
Octopress is an obsessively designed framework for Jekyll blogging. It’s easy to configure and easy to deploy. Sweet huh?
No licenseAug 28, 2026 · metrics 2.10.0
NuGet
git-ecosystem/git-credential-manager
Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
mattn/go-sqlite3
sqlite3 driver for go using database/sql
MITAug 28, 2026 · metrics 2.10.0
Packagist · npm
PrestaShop/PrestaShop
PrestaShop is the universal open-source software platform to build your e-commerce solution.
Custom licenseSep 30, 2026 · metrics 2.10.0
npm · Go · Maven +1
bigbluebutton/bigbluebutton
A complete web conferencing system for virtual classes and more!
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
higress-group/higress
🤖 AI Gateway | AI Native API Gateway
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go
golang-jwt/jwt
Go implementation of JSON Web Tokens (JWT).
MITAug 28, 2026 · metrics 2.10.0
crates.io · PyPI
apache/datafusion
Apache DataFusion SQL Query Engine
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
kpdecker/jsdiff
A javascript text differencing implementation.
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
MITSep 17, 2026 · metrics 2.10.0
crates.io
paradedb/paradedb
One Postgres for your application data, full-text search, vector retrieval, and aggregations. Home of the pg_search extension.
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
npm
yagop/node-telegram-bot-api
Telegram Bot API for NodeJS
MITAug 28, 2026 · metrics 2.10.0
npm
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
MITSep 17, 2026 · metrics 2.10.0
crates.io · npm
wasm-bindgen/wasm-bindgen
Facilitating high-level interactions between Wasm modules and JavaScript
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
vicinaehq/vicinae
A focused launcher for your desktop - native, fast, extensible
GPL-3.0Aug 28, 2026 · metrics 2.10.0
npm
kepano/defuddle
Get the main content of any page as Markdown.
MITAug 28, 2026 · metrics 2.10.0
Packagist
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
MITSep 18, 2026 · metrics 2.10.0