Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,912
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
652B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
PyPI · crates.io
Qiskit/qiskit
Qiskit is an open-source SDK for working with quantum computers at the level of extended quantum circuits, operators, and primitives.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
github/scientist
:microscope: A Ruby library for carefully refactoring critical paths.
MITAug 28, 2026 · metrics 2.10.0
npm
OneUptime/oneuptime
Complete open-source monitoring and observability platform.
Custom licenseOct 20, 2026 · metrics 2.10.0
crates.io · npm
MystenLabs/sui
Sui, a next-generation smart contract platform with high throughput, low latency, and an asset-oriented programming model powered by the Move programming language
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
zhu1090093659/dsh-web
DeepSeek Harness (DSH) Web 插件聚合生态 · 万物皆插件，通过创意工坊分发｜｜DeepSeek Harness (DSH) Web Plugin Aggregation Ecosystem · Everything is a plugin, distributed via the Creative Workshop
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io · npm · PyPI
warp-tech/warpgate
Fully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/php-timer
Utility class for timing
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
—
dotnet/wpf
WPF is a .NET Core UI framework for building Windows desktop applications.
MITSep 17, 2026 · metrics 2.10.0
npm
vscode-neovim/vscode-neovim
Vim mode for VSCode, powered by Neovim
MITAug 28, 2026 · metrics 2.10.0
PyPI
gaogaotiantian/viztracer
A debugging and profiling tool that can trace and visualize python code execution
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
TheWidlarzGroup/react-native-video
A <Video /> component for react-native
MITOct 24, 2026 · metrics 2.10.0
PyPI
SWE-agent/mini-swe-agent
The 100 line AI agent that solves GitHub issues or helps you in your command line. Radically simple, no huge configs, no giant monorepo—but scores >74% on SWE-bench verified!
MITSep 17, 2026 · metrics 2.10.0
npm
raycast/extensions
Everything you need to extend Raycast.
MITAug 28, 2026 · metrics 2.10.0
npm
sindresorhus/np
A better `npm publish`
MITAug 28, 2026 · metrics 2.10.0
Go · npm
aws/karpenter-provider-aws
Karpenter is a Kubernetes Node Autoscaler built for flexibility, performance, and simplicity.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
guzzle/promises
Promises/A+ library for PHP with synchronous support
MITOct 20, 2026 · metrics 2.10.0
Go · PyPI
uber-go/fx
A dependency injection based application framework for Go.
MITOct 21, 2026 · metrics 2.10.0
npm
nodejs/undici
An HTTP/1.1 client, written from scratch for Node.js
MITSep 16, 2026 · metrics 2.10.0
crates.io · npm · PyPI
EricLBuehler/mistral.rs
Fast, flexible LLM inference
MITSep 17, 2026 · metrics 2.10.0
npm
Comcast/react-data-grid
Feature-rich and customizable data grid React component
Custom licenseOct 24, 2026 · metrics 2.10.0
Go
go-git/go-git
A highly extensible Git implementation in pure Go.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
mapstruct/mapstruct
An annotation processor for generating type-safe bean mappers
Custom licenseAug 28, 2026 · metrics 2.10.0
crates.io · npm
cachix/devenv
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix
Apache-2.0Sep 25, 2026 · metrics 2.10.0
npm · crates.io
parcel-bundler/lightningcss
An extremely fast CSS parser, transformer, bundler, and minifier written in Rust.
MPL-2.0Sep 16, 2026 · metrics 2.10.0
Maven
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Go
evrone/go-clean-template
Clean Architecture template for Golang services
MITAug 28, 2026 · metrics 2.10.0
npm
styled-components/polished
A lightweight toolset for writing styles in JavaScript ✨
MITSep 17, 2026 · metrics 2.10.0
PyPI
kubernetes-client/python
Official Python client library for kubernetes
Apache-2.0Aug 28, 2026 · metrics 2.10.0
crates.io · PyPI
prefix-dev/pixi
Powerful system-level package manager for Linux, macOS and Windows written in Rust – building on top of the Conda ecosystem.
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
webmozarts/assert
Assertions to validate method input/output with nice error messages.
MITOct 24, 2026 · metrics 2.10.0