Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,845
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Go
aquasecurity/kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
mumble-voip/mumble
Mumble is an open-source, low-latency, high quality voice chat software.
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI · crates.io
ijl/orjson
Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
shaka-project/shaka-player
JavaScript player library / DASH & HLS client / MSE-EME player
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
expressjs/morgan
HTTP request logger middleware for node.js
MITSep 17, 2026 · metrics 2.10.0
PyPI
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
MITSep 17, 2026 · metrics 2.10.0
Go
lightningnetwork/lnd
Lightning Network Daemon ⚡️
MITAug 28, 2026 · metrics 2.10.0
PyPI
OpenDCAI/DataFlow
[SIGMOD'27] Easy Data Preparation with latest LLMs-based Operators and Pipelines.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
n4ze3m/page-assist
Use your locally running AI models to assist you in your web browsing
MITAug 28, 2026 · metrics 2.10.0
npm
soldair/node-qrcode
qr code generator
MITSep 17, 2026 · metrics 2.10.0
RubyGems
thoughtbot/factory_bot
A library for setting up Ruby objects as test data.
MITAug 28, 2026 · metrics 2.10.0
npm
OrchardCMS/OrchardCore
Orchard Core is an open-source modular and multi-tenant application framework built with ASP.NET Core, and a content management system (CMS) built on top of that framework.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm · Packagist
twbs/icons
Official open source SVG icon library for Bootstrap.
MITOct 24, 2026 · metrics 2.10.0
npm
vudovn/ag-kit
No repository description published.
MITAug 28, 2026 · metrics 2.10.0
Packagist
paragonie/random_compat
PHP 5.x support for random_bytes() and random_int()
MITOct 24, 2026 · metrics 2.10.0
npm
windingwind/zotero-better-notes
Everything about note management. All in Zotero.
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
RubyGems
basecamp/fizzy
Kanban as it should be. Not as it has been.
Custom licenseAug 28, 2026 · metrics 2.10.0
—
fluent/fluent-bit
Fast and Lightweight Logs, Metrics and Traces processor for Linux, BSD, OSX and Windows
Apache-2.0Sep 29, 2026 · metrics 2.10.0
npm
mde/ejs
Embedded JavaScript templates -- http://ejs.co
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
backnotprop/plannotator
Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · crates.io · PyPI
pydantic/monty
A minimal, secure Python interpreter written in Rust for use by AI
MITAug 28, 2026 · metrics 2.10.0
Go · npm
GUI-for-Cores/GUI.for.SingBox
Modern, lightweight desktop app built with Wails (Go) and Vue 3. Efficient, cross-platform, and fast.
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Packagist
symfony/http-kernel
Provides a structured process for converting a Request into a Response
MITOct 24, 2026 · metrics 2.10.0
npm
yarnpkg/berry
📦🐈 Active development trunk for Yarn ⚒
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
RubyGems
omniauth/omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
MITAug 28, 2026 · metrics 2.10.0
PyPI
MagicStack/asyncpg
A fast PostgreSQL Database Client Library for Python/asyncio.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
crates.io
ducaale/xh
Friendly and fast tool for sending HTTP requests
MITSep 18, 2026 · metrics 2.10.0
npm
fonoster/fonoster
🚀 The open-source alternative to Twilio.
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
opengeos/GeoLibre
A lightweight, cloud-native GIS platform for visualizing, exploring, and analyzing geospatial data. It runs in the web browser, on the desktop, on mobile, and inside Jupyter notebooks.
MITOct 21, 2026 · metrics 2.10.0
PyPI
InternLM/lmdeploy
LMDeploy is a toolkit for compressing, deploying, and serving LLMs.
Apache-2.0Sep 20, 2026 · metrics 2.10.0