Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,845
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
javalin/javalin
A simple and modern Java and Kotlin web framework
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm · PyPI
growthbook/growthbook
Open Source Feature Flags, Experimentation, and Product Analytics
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI · Go
openatx/uiautomator2
Android Uiautomator2 Python Wrapper
MITSep 17, 2026 · metrics 2.10.0
npm
jerryc127/hexo-theme-butterfly
🦋 A Hexo Theme: Butterfly
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
bytedeco/javacv
Java interface to OpenCV, FFmpeg, and more
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
grommet/grommet
a react-based framework that provides accessibility, modularity, responsiveness, and theming in a tidy package
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
zeux/meshoptimizer
Mesh optimization library that makes meshes smaller and faster to render
MITSep 17, 2026 · metrics 2.10.0
npm
ngrx/platform
Reactive State for Angular
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI · npm
jupyterhub/jupyterhub
Multi-user server for Jupyter notebooks
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Go
openclaw/gogcli
Google Workspace in your terminal.
MITAug 28, 2026 · metrics 2.10.0
Go
qualcomm/GenieX
Run frontier LLMs and VLMs locally on Qualcomm devices across NPU, GPU, and CPU with a few lines of code
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Go · npm
databasus/databasus
PostgreSQL backup tool with Point-In-Time-Recovery and restore verification
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · crates.io
open-pencil/open-pencil
AI-native design editor. Open-source Figma alternative.
MITSep 15, 2026 · metrics 2.10.0
PyPI
mherrmann/helium
Lighter web automation with Python
MITSep 15, 2026 · metrics 2.10.0
PyPI
py-why/dowhy
DoWhy is a Python library for causal inference that supports explicit modeling and testing of causal assumptions. DoWhy is based on a unified language for causal inference, combining causal graphical models and potential outcomes frameworks.
MITSep 17, 2026 · metrics 2.10.0
npm
antfu-collective/ni
💡 Use the right package manager
MITSep 18, 2026 · metrics 2.10.0
npm
remix-run/history
Manage session history with JavaScript
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go · npm
superradcompany/microsandbox
🧱 Easy fast local-first microVM runtime and library
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
lmcinnes/umap
Uniform Manifold Approximation and Projection
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
PyPI
THUDM/slime
slime is an LLM post-training framework for RL Scaling.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
cordiverse/cordis
Meta-Framework of Spatiotemporal Composability
MITSep 9, 2026 · metrics 2.10.0
npm
chaijs/chai
BDD / TDD assertion framework for node.js and the browser that can be paired with any testing framework.
MITSep 16, 2026 · metrics 2.10.0
Packagist · npm
jackocnr/intl-tel-input
For entering, formatting, and validating international telephone numbers. Available in vanilla JavaScript, or as React, Vue, Angular, and Svelte components.
MITSep 17, 2026 · metrics 2.10.0
—
pkg/errors
Simple error handling primitives
BSD-2-ClauseAug 28, 2026 · metrics 2.10.0
PyPI
PyCQA/bandit
Bandit is a tool designed to find common security issues in Python code.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
graphql-python/graphene
GraphQL framework for Python
MITOct 23, 2026 · metrics 2.10.0
Go · npm
smartcontractkit/chainlink
node of the decentralized oracle network, bridging on and off-chain computation
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
fengyuanchen/viewerjs
JavaScript image viewer.
MITAug 28, 2026 · metrics 2.10.0
RubyGems
chef/chef
Chef Infra, a powerful automation platform that transforms infrastructure into code automating how infrastructure is configured, deployed and managed across any environment, at any scale
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
heartcombo/simple_form
Forms made easy for Rails! It's tied to a simple DSL, with no opinion on markup.
MITAug 28, 2026 · metrics 2.10.0