Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,795
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
heyform/heyform
Open-Source Form Builder
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
Go
codenotary/immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven
lysine-dev/okio
A modern I/O library for Android, Java, and Kotlin Multiplatform.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go · npm
mark3labs/mcp-go
A Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and external data sources and tools.
MITAug 28, 2026 · metrics 2.10.0
Go · npm
pocket-id/pocket-id
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
BSD-2-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
phpDocumentor/ReflectionCommon
No repository description published.
MITOct 24, 2026 · metrics 2.10.0
npm · Packagist
solidtime-io/solidtime
Modern open-source time-tracking app
AGPL-3.0Oct 23, 2026 · metrics 2.10.0
—
capstone-engine/capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
podman-container-tools/buildah
A tool that facilitates building OCI images.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
uber/baseweb
A React Component library implementing the Base design language
MITOct 13, 2026 · metrics 2.10.0
npm
EvoMap/evolver
The GEP-powered self-evolving engine for AI agents. Auditable evolution with Genes, Capsules, and Events. | evomap.ai
GPL-3.0Aug 28, 2026 · metrics 2.10.0
npm
open-circle/valibot
The modular and type safe schema library for validating structural data 🤖
MITSep 17, 2026 · metrics 2.10.0
Maven
checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
thoughtbot/bourbon
A Lightweight Sass Tool Set
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
MITAug 28, 2026 · metrics 2.10.0
npm · PyPI
beautifier/js-beautify
Beautifier for javascript
MITOct 6, 2026 · metrics 2.10.0
npm
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
Uberi/speech_recognition
Speech recognition module for Python, supporting several engines and APIs, online and offline.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
PyPI · npm
delta-io/delta
An open-source storage framework that enables building a Lakehouse architecture with compute engines including Spark, PrestoDB, Flink, Trino, and Hive and APIs
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
remarkjs/remark
markdown processor powered by plugins part of the @unifiedjs collective
MITSep 17, 2026 · metrics 2.10.0
npm
infinitered/nsfwjs
NSFW detection on the client-side via TensorFlow.js
MITSep 15, 2026 · metrics 2.10.0
npm
tsparticles/tsparticles
tsParticles - Easily create highly customizable JavaScript particles effects, confetti explosions and fireworks animations and use them as animated backgrounds for your website. Ready to use components available for React.js, Vue.js (2.x and 3.x), Angular, Svelte, jQuery, Preact, Inferno, Solid, Riot and Web Components.
MITOct 5, 2026 · metrics 2.10.0
PyPI
realsenseai/librealsense
RealSense SDK
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
urql-graphql/urql
The highly customizable and versatile GraphQL client with which you add on features like normalized caching as you grow.
MITSep 15, 2026 · metrics 2.10.0
PyPI · RubyGems
bridgecrewio/checkov
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go
kubernetes/autoscaler
Autoscaling components for Kubernetes
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI · npm
MervinPraison/PraisonAI
PraisonAI 🦞 — Hire a 24/7 AI Workforce. Stop writing boilerplate and start shipping autonomous self-improving agents that research, plan, code, and execute tasks. Deployed in 5 lines of code with built-in memory, RAG, and support for 100+ LLMs.
MITAug 28, 2026 · metrics 2.10.0
NuGet
LibreHardwareMonitor/LibreHardwareMonitor
Libre Hardware Monitor is free software that can monitor the temperature sensors, fan speeds, voltages, load and clock speeds of your computer.
MPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
maxence-charriere/go-app
A package to build progressive web apps with Go programming language and WebAssembly.
MITAug 28, 2026 · metrics 2.10.0
PyPI
ml-explore/mlx-examples
Examples in the MLX framework
MITSep 17, 2026 · metrics 2.10.0