Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,152
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
dbos-inc/dbos-transact-ts
Database-Backed Durable TypeScript Workflows
MITSep 5, 2026 · metrics 2.10.0
npm
parse-community/Parse-SDK-JS
The JavaScript SDK for Parse Platform
Apache-2.0Sep 6, 2026 · metrics 2.10.0
NuGet
SpecterOps/SharpHound
C# Data Collector for BloodHound
GPL-3.0Sep 1, 2026 · metrics 2.10.0
npm
brianvoe/slim-select
Slim advanced select dropdown
MITSep 5, 2026 · metrics 2.10.0
Go · npm
golang/pkgsite
[mirror] Home of the pkg.go.dev website
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
crates.io · npm
sebadob/rauthy
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
Apache-2.0Sep 6, 2026 · metrics 2.10.0
NuGet
VirtoCommerce/vc-platform
Virto Commerce B2B Innovation Platform
Custom licenseSep 3, 2026 · metrics 2.10.0
npm
igordanchenko/yet-another-react-lightbox
Modern React lightbox component
MITSep 6, 2026 · metrics 2.10.0
npm · PyPI · RubyGems
BetterDB-inc/monitor
Real-time monitoring, slowlog analysis, and audit trails for Valkey and Redis
Custom licenseSep 5, 2026 · metrics 2.10.0
Packagist
nette/latte
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
nuxt-hub/core
Add database, KV, blob storage, and cache to your Nuxt application. NuxtHub works on Vercel, Cloudflare, Netlify, and more.
MITSep 5, 2026 · metrics 2.10.0
Go
marcosnils/bin
Effortless binary manager
MITSep 5, 2026 · metrics 2.10.0
NuGet · npm
RRQM/TouchSocket
TouchSocket is an integrated .NET networking framework that includes modules for socket, TCP, UDP, SSL, named pipes, HTTP, WebSocket, RPC, and more. It offers a one-stop solution for TCP packet issues and enables quick implementation of custom data message parsing using protocol templates.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
crates.io · Go · npm +1
VirusTotal/yara-x
A rewrite of YARA in Rust.
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
crates.io · npm
coollabsio/jean
A dev environment for AI agents.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
npm
StefanTerdell/zod-to-json-schema
Converts Zod schemas to Json schemas
ISCAug 31, 2026 · metrics 2.10.0
PyPI
turnstonelabs/turnstone
No repository description published.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
NuGet
dotnet/ClangSharp
Clang bindings for .NET written in C#
MITSep 6, 2026 · metrics 2.10.0
Packagist
Roave/BetterReflection
:crystal_ball: Better Reflection is a reflection API that aims to improve and provide more features than PHP's built-in reflection API.
MITSep 5, 2026 · metrics 2.10.0
PyPI · crates.io
ai-dynamo/nixl
NVIDIA Inference Xfer Library (NIXL)
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
pmndrs/detect-gpu
Classifies GPUs based on their 3D rendering benchmark score allowing the developer to provide sensible default settings for graphically intensive applications.
MITSep 5, 2026 · metrics 2.10.0
npm · Packagist · PyPI
nextcloud/bookmarks
🔖 Bookmark app for Nextcloud
AGPL-3.0Sep 5, 2026 · metrics 2.10.0
npm
Runfusion/Fusion
Your Software Factory - build faster and better with multi node agents that work 24/7
MITSep 5, 2026 · metrics 2.10.0
crates.io
kornelski/dssim
Image similarity comparison simulating human perception (multiscale SSIM in Rust)
AGPL-3.0Sep 1, 2026 · metrics 2.10.0
crates.io
plabayo/rama
modular service framework to move and transform network packets
Apache-2.0Sep 5, 2026 · metrics 2.10.0
npm
intoli/user-agents
A JavaScript library for generating random user agents with data that's updated daily.
Custom licenseSep 5, 2026 · metrics 2.10.0
—
c4spar/cliffy
A TypeScript-first, runtime-agnostic command-line toolkit for building complex CLIs — featuring a command framework, argument parser, interactive prompts, tables, ANSI utilities, and more.
MITSep 5, 2026 · metrics 2.10.0
npm
yysun/apprun
AppRun is a JavaScript library for developing high-performance and reliable web applications using the elm inspired architecture, events and components.
MITSep 6, 2026 · metrics 2.10.0
npm
Chorus-AIDLC/Chorus
The Agent Harness for AI-Human Collaboration, inspired by the AI-DLC (AI-Driven Development Lifecycle)
AGPL-3.0Sep 5, 2026 · metrics 2.10.0
npm
franklioxygen/MyTube
Self-hosted downloader and player for YouTube, Bilibili, Twitch, MissAV, and yt-dlp sites. Features channel subscriptions, auto-downloads, and local storage for media. Organize your library into collections with a sleek UI. Includes built-in Cloudflare Tunnel support for secure remote access without port forwarding. Docker-ready deployment.
MITSep 6, 2026 · metrics 2.10.0