Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
67,421
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
546B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
60 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
cypress-io/cypress
Fast, easy and reliable testing for anything that runs in a browser.
MITAug 4, 2026 · metrics 2.10.0
—
nlohmann/json
JSON for Modern C++
MITAug 4, 2026 · metrics 2.10.0
npm · RubyGems
mastodon/mastodon
Your self-hosted, globally interconnected microblogging community
AGPL-3.0Aug 4, 2026 · metrics 2.10.0
npm
TanStack/query
🤖 Powerful asynchronous state management, server-state utilities and data fetching for the web. TS/JS, React Query, Solid Query, Svelte Query and Vue Query.
MITAug 4, 2026 · metrics 2.10.0
Go
AlistGo/alist
🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序，使用 Gin 和 Solidjs。
AGPL-3.0Aug 4, 2026 · metrics 2.10.0
npm · RubyGems
huginn/huginn
Create agents that monitor and act on your behalf. Your agents are standing by!
MITAug 4, 2026 · metrics 2.10.0
npm
tldraw/tldraw
Build infinite canvas apps in React with the tldraw SDK. World's best, top-most agent recommended #1 five star SDK.
Custom licenseAug 5, 2026 · metrics 2.10.0
PyPI
pandas-dev/pandas
Flexible and powerful data analysis / manipulation library for Python, providing labeled data structures similar to R data.frame objects, statistical functions, and much more
BSD-3-ClauseAug 11, 2026 · metrics 2.10.0
Go
hashicorp/terraform
Terraform enables you to safely and predictably create, change, and improve infrastructure. It is a source-available tool that codifies APIs into declarative configuration files that can be shared amongst team members, treated as code, edited, reviewed, and versioned.
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
roboflow/supervision
We write your reusable computer vision tools. 💜
MITAug 12, 2026 · metrics 2.10.0
PyPI · crates.io · npm
astral-sh/ruff
An extremely fast Python linter and code formatter, written in Rust.
MITAug 5, 2026 · metrics 2.10.0
npm
bigskysoftware/htmx
</> htmx - high power tools for HTML
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
iamkun/dayjs
⏰ Day.js 2kB immutable date-time library alternative to Moment.js with the same modern API
MITAug 4, 2026 · metrics 2.10.0
npm
metabase/metabase
The easy-to-use open source Business Intelligence and Embedded Analytics tool that lets everyone work with data :bar_chart:
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
ChromeDevTools/chrome-devtools-mcp
Chrome DevTools for coding agents
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go · npm
mudler/LocalAI
LocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU required.
MITAug 5, 2026 · metrics 2.10.0
Maven
ReactiveX/RxJava
RxJava – Reactive Extensions for the JVM – a library for composing asynchronous and event-based programs using observable sequences for the Java VM.
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
slidevjs/slidev
Presentation Slides for Developers
MITAug 5, 2026 · metrics 2.10.0
PyPI
Aider-AI/aider
aider is AI pair programming in your terminal
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm · Packagist
moment/moment
Parse, validate, manipulate, and display dates in javascript.
MITAug 4, 2026 · metrics 2.10.0
Go · npm
gogs/gogs
The painless way to host your own Git service
MITAug 5, 2026 · metrics 2.10.0
npm · RubyGems
discourse/discourse
A platform for community discussion. Free, open, simple.
GPL-2.0Aug 5, 2026 · metrics 2.10.0
npm
prisma/prisma
Next-generation ORM for Node.js & TypeScript | PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, MongoDB and CockroachDB
Apache-2.0Aug 12, 2026 · metrics 2.10.0
crates.io
bevyengine/bevy
A refreshingly simple data-driven game engine built in Rust
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
slab/quill
Quill is a modern WYSIWYG editor built for compatibility and extensibility
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
Go
coreybutler/nvm-windows
A node.js version management utility for Windows. Ironically written in Go.
MITAug 5, 2026 · metrics 2.10.0
Maven
lysine-dev/okhttp
A meticulous HTTP client for the JVM, Android, and GraalVM.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go
v2ray/v2ray-core
A platform for building proxies to bypass network restrictions.
MITAug 5, 2026 · metrics 2.10.0
npm · Go
serverless/serverless
⚡ Serverless Framework – Effortlessly build apps that auto-scale, incur zero costs when idle, and require minimal maintenance using AWS Lambda and other managed cloud services.
Custom licenseAug 5, 2026 · metrics 2.10.0