Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,789
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
mikro-orm/mikro-orm
TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Supports MongoDB, MySQL, MariaDB, MS SQL Server, PostgreSQL and SQLite/libSQL databases.
MITAug 28, 2026 · metrics 2.10.0
—
testssl/testssl.sh
Testing TLS/SSL encryption anywhere on any port
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
vitalik/django-ninja
💨 Fast, Async-ready, Openapi, type hints based framework for building APIs
MITAug 28, 2026 · metrics 2.10.0
npm
klaudiosinani/signale
Highly configurable logging library
MITSep 17, 2026 · metrics 2.10.0
npm
NG-ZORRO/ng-zorro-antd
Angular UI Component Library based on Ant Design
MITAug 28, 2026 · metrics 2.10.0
Packagist
phpDocumentor/TypeResolver
A PSR-5 based resolver of Class names, Types and Structural Element Names
MITOct 24, 2026 · metrics 2.10.0
npm
mrdoob/stats.js
JavaScript Performance Monitor
MITSep 17, 2026 · metrics 2.10.0
—
uNetworking/uWebSockets.js
μWebSockets for Node.js back-ends :metal:
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems · npm
just-the-docs/just-the-docs
A modern, high customizable, responsive Jekyll theme for documentation with built-in search.
MITAug 28, 2026 · metrics 2.10.0
PyPI
droidrun/mobilerun
Automate your mobile devices with natural language commands - an LLM agnostic mobile Agent 🤖
MITAug 28, 2026 · metrics 2.10.0
npm
gridstack/gridstack.js
Build interactive dashboards in minutes.
MITSep 17, 2026 · metrics 2.10.0
PyPI
modelscope/modelscope
ModelScope: bring the notion of Model-as-a-Service to life.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · crates.io
polakowo/vectorbt
The backtesting engine that gives you an unfair advantage. Run thousands of trading ideas before others finish one.
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
Nutlope/aicommits
A CLI that writes your git commit messages for you with AI
MITOct 12, 2026 · metrics 2.10.0
PyPI
Supervisor/supervisor
Supervisor process control system for Unix (supervisord)
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
catboost/catboost
A fast, scalable, high performance Gradient Boosting on Decision Trees library, used for ranking, classification, regression and other machine learning tasks for Python, R, Java, C++. Supports computation on CPU and GPU.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io · npm
loco-rs/loco
🚂 🦀 The one-person framework for Rust for side-projects and startups
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
reactphp/reactphp
Event-driven, non-blocking I/O with PHP.
MITOct 6, 2026 · metrics 2.10.0
Go · crates.io · Maven +2
BoundaryML/baml
The programming language for agents
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · npm
certimate-go/certimate
An open-source and free self-hosted SSL certificates ACME tool, automates the full-cycle of issuance, deployment, renewal, and monitoring visually. 完全开源免费的自托管 SSL 证书 ACME 工具，申请、部署、续期、监控全流程自动化可视化，支持各大主流云厂商。
MITAug 28, 2026 · metrics 2.10.0
Go
tektoncd/pipeline
A cloud-native Pipeline resource.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
huntabyte/shadcn-svelte
shadcn/ui, but for Svelte. ✨
MITAug 28, 2026 · metrics 2.10.0
npm
artilleryio/artillery
The complete load testing platform. Everything you need for production-grade load tests. Serverless & distributed. Load test with Playwright. Load test HTTP APIs, GraphQL, WebSocket, and more. Use any Node.js module.
MPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
mvdan/sh
A shell parser, formatter, and interpreter with bash and zsh support; includes shfmt
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
pyro-ppl/pyro
Deep universal probabilistic programming with Python and PyTorch
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
release-it/release-it
🚀 Automate versioning and package publishing
MITSep 15, 2026 · metrics 2.10.0
npm
usekaneo/kaneo
🎯 All you need. Nothing you don't. Open source project management that works for you, not against you.
MITSep 12, 2026 · metrics 2.10.0
PyPI
arrow-py/arrow
🏹 Better dates & times for Python
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · RubyGems
onsi/ginkgo
A Modern Testing Framework for Go
MITAug 28, 2026 · metrics 2.10.0
PyPI · crates.io
angr/angr
A powerful and user-friendly binary analysis platform!
BSD-2-ClauseAug 28, 2026 · metrics 2.10.0