Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,795
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
kelektiv/node-cron
Cron for NodeJS.
MITSep 17, 2026 · metrics 2.10.0
npm
ljharb/qs
A querystring parser and serializer with nesting support
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Go
securego/gosec
Go security checker
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
karatelabs/karate
Test Automation Made Simple
MITAug 28, 2026 · metrics 2.10.0
—
java-native-access/jna
Java Native Access
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
aeron-io/aeron
Efficient reliable UDP unicast, UDP multicast, and IPC message transport
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
jo-inc/camofox-browser
Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.
MITAug 28, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/php-code-coverage
Library that provides collection, processing, and rendering functionality for PHP code coverage information.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
Go · npm
justlovemaki/AIClient2API
Self-hosted multi-protocol AI API proxy for Antigravity, Codex, Grok, Kiro, OpenAI, Claude, and custom providers. Supports OpenAI-compatible API, Claude API, Gemini protocol conversion, GPT, Grok Build, Claude Opus, Gemini Pro, Kimi, MiniMax, provider pools, smart routing, and automatic failover.
GPL-3.0Oct 22, 2026 · metrics 2.10.0
PyPI
googleapis/google-api-python-client
🐍 The official Python client library for Google's discovery based APIs.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
HypothesisWorks/hypothesis
The property-based testing library for Python
Custom licenseAug 28, 2026 · metrics 2.10.0
RubyGems
ankane/pghero
A performance dashboard for Postgres
MITAug 28, 2026 · metrics 2.10.0
PyPI
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
No licenseAug 28, 2026 · metrics 2.10.0
NuGet · npm
JeffreySu/WeiXinMPSDK
微信全平台 .NET SDK， Senparc.Weixin for C#，支持 .NET Framework 及 .NET Core、.NET 10.0。已支持微信公众号、小程序、小游戏、微信支付、企业微信/企业号、开放平台、JSSDK、微信周边等全平台。 WeChat SDK for C#.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
myclabs/DeepCopy
Create deep copies (clones) of your objects
MITOct 20, 2026 · metrics 2.10.0
Go
pdfcpu/pdfcpu
PDF tooling for Go and the command line.
Apache-2.0Oct 16, 2026 · metrics 2.10.0
RubyGems
javan/whenever
Cron jobs in Ruby
MITAug 28, 2026 · metrics 2.10.0
PyPI
theskumar/python-dotenv
Reads key-value pairs from a .env file and can set them as environment variables. It helps in developing applications following the 12-factor principles.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
MITSep 17, 2026 · metrics 2.10.0
PyPI
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
bentoml/BentoML
The easiest way to serve AI apps and models - Build Model Inference APIs, Job queues, LLM apps, Multi-model pipelines, and more!
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
MITAug 28, 2026 · metrics 2.10.0
Go
charmbracelet/bubbles
TUI components for Bubble Tea 🫧
MITAug 28, 2026 · metrics 2.10.0
npm
modem-dev/hunk
Review-first terminal diff viewer for agentic coders
MITAug 28, 2026 · metrics 2.10.0
Go · npm
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
evilmartians/lefthook
Fast and powerful Git hooks manager for any type of projects.
MITSep 17, 2026 · metrics 2.10.0
Maven
apache/shenyu
Apache ShenYu is a Java native API Gateway for service proxy, protocol conversion and API governance.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
open-gsd/gsd-core
Git. Ship. Done - Core
MITAug 28, 2026 · metrics 2.10.0
Go
ViRb3/wgcf
🚤 Cross-platform, unofficial CLI for Cloudflare Warp
MITOct 19, 2026 · metrics 2.10.0
npm
BuilderIO/builder
Visual Development for React, Vue, Svelte, Qwik, and more
MITAug 28, 2026 · metrics 2.10.0