Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,284
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
647B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
guzzle/promises
Promises/A+ library for PHP with synchronous support
MITOct 20, 2026 · metrics 2.10.0
Go · PyPI
uber-go/fx
A dependency injection based application framework for Go.
MITOct 21, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/diff
Diff implementation
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
crates.io · npm
boa-dev/boa
Boa is an embeddable Javascript engine written in Rust.
MITOct 21, 2026 · metrics 2.10.0
PyPI
Kaggle/kaggle-cli
Official Kaggle CLI
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Packagist
symfony/routing
Maps an HTTP request to a set of configuration variables
MITOct 20, 2026 · metrics 2.10.0
Packagist
PHPOffice/PHPWord
A pure PHP library for reading and writing word processing documents
Custom licenseOct 20, 2026 · metrics 2.10.0
npm
di-sukharev/opencommit
top #1 and most feature rich GPT wrapper for git — generate commit messages with an LLM in 1 sec — works with Claude, GPT and every other provider, supports local Ollama models too
MITOct 21, 2026 · metrics 2.10.0
Maven
swagger-api/swagger-core
Examples and server integrations for generating the Swagger API Specification, which enables easy access to your REST API
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
Gentleman-Programming/engram
Persistent memory system for AI coding agents. Agent-agnostic Go binary with SQLite + FTS5, MCP server, HTTP API, CLI, and TUI.
MITOct 20, 2026 · metrics 2.10.0
Packagist
lcobucci/jwt
A simple library to work with JSON Web Token and JSON Web Signature
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
BuilderIO/agent-native
A framework for building agentic apps
MITOct 21, 2026 · metrics 2.10.0
Packagist
symfony/process
Executes commands in sub-processes
MITOct 20, 2026 · metrics 2.10.0
Packagist
symfony/var-dumper
Provides mechanisms for walking through any arbitrary PHP variable
MITOct 20, 2026 · metrics 2.10.0
Go
cloudwego/hertz
Go HTTP framework with high-performance and strong-extensibility for building micro-services.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
typestack/class-transformer
Decorator-based transformation, serialization, and deserialization between objects and classes.
MITOct 18, 2026 · metrics 2.10.0
crates.io
watchexec/watchexec
Executes commands in response to file modifications
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
charmbracelet/huh
Build terminal forms and prompts 🤷🏻♀️
MITOct 21, 2026 · metrics 2.10.0
PyPI · crates.io · Maven
lance-format/lance
Open Lakehouse Format for Multimodal AI. Convert from Parquet in 2 lines of code for 100x faster random access, vector index, and data versioning. Compatible with Pandas, DuckDB, Polars, Pyarrow, and PyTorch with more integrations coming..
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
jaywcjlove/hotkeys-js
➷ A robust Javascript library for capturing keyboard input. It has no dependencies.
MITOct 19, 2026 · metrics 2.10.0
npm
plasmicapp/plasmic
Visual builder for React. Build apps, websites, and content. Integrate with your codebase.
MITOct 22, 2026 · metrics 2.10.0
Maven · npm
detekt/detekt
Static code analysis for Kotlin
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/comparator
Provides the functionality to compare PHP values for equality.
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
MITOct 22, 2026 · metrics 2.10.0
Go
dgraph-io/ristretto
A high performance memory-bound Go cache
Apache-2.0Oct 21, 2026 · metrics 2.10.0
—
littlefs-project/littlefs
A little fail-safe filesystem designed for microcontrollers
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
npm
reactchartjs/react-chartjs-2
React components for Chart.js, the most popular charting library
MITOct 20, 2026 · metrics 2.10.0
Go · npm
dominikh/go-tools
Staticcheck - The advanced Go linter
MITOct 21, 2026 · metrics 2.10.0
Maven
raphw/byte-buddy
Runtime code generation for the Java virtual machine.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
NuGet
jstedfast/MailKit
A cross-platform .NET library for IMAP, POP3, and SMTP.
MITOct 20, 2026 · metrics 2.10.0