Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,998
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
nuxt/ui
The Intuitive Vue UI Library powered by Reka UI & Tailwind CSS.
MITOct 24, 2026 · metrics 2.10.0
PyPI
pdfminer/pdfminer.six
Community maintained fork of pdfminer - we fathom PDF
MITSep 16, 2026 · metrics 2.10.0
Go
agones-dev/agones
Dedicated Game Server Hosting and Scaling for Multiplayer Games on Kubernetes
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
adbar/trafilatura
Python & Command-line tool to gather text and metadata on the Web: Crawling, scraping, extraction, output as CSV, JSON, HTML, MD, TXT, XML
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
MikeMcl/bignumber.js
A JavaScript library for arbitrary-precision decimal and non-decimal arithmetic
MITSep 17, 2026 · metrics 2.10.0
npm
zenoamaro/react-quill
A Quill component for React.
MITSep 17, 2026 · metrics 2.10.0
Go
dgraph-io/ristretto
A high performance memory-bound Go cache
Apache-2.0Oct 21, 2026 · metrics 2.10.0
crates.io
skim-rs/skim
Fuzzy Finder in rust!
MITOct 24, 2026 · metrics 2.10.0
Go
yuin/gopher-lua
GopherLua: VM and compiler for Lua in Go
MITOct 24, 2026 · metrics 2.10.0
Packagist
hamcrest/hamcrest-php
PHP Hamcrest implementation [Official]
Custom licenseOct 24, 2026 · metrics 2.10.0
crates.io · PyPI · npm
facebook/pyrefly
A fast type checker and language server for Python
MITSep 17, 2026 · metrics 2.10.0
—
littlefs-project/littlefs
A little fail-safe filesystem designed for microcontrollers
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
crates.io
rust-lang/rustfmt
Format Rust code
Apache-2.0Sep 18, 2026 · metrics 2.10.0
PyPI
PyCQA/isort
A Python utility / library to sort imports.
MITOct 24, 2026 · metrics 2.10.0
—
sinclairzx81/typebox
JSON Schema Type Builder with Static Type Resolution for TypeScript
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
openstyles/stylus
Stylus - Userstyles Manager
GPL-3.0Oct 24, 2026 · metrics 2.10.0
Maven
chillzhuang/SpringBlade
SpringBlade 是一个由商业级项目升级优化而来的微服务架构，采用Spring Boot 4 、Spring Cloud 2025、Java 21 等核心技术构建，完全遵循阿里巴巴编码规范。提供基于React和Vue的两个前端框架用于快速搭建企业级的SaaS多租户微服务平台。
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
mapbox/pixelmatch
The smallest, simplest and fastest JavaScript pixel-level image comparison library
ISCSep 17, 2026 · metrics 2.10.0
PyPI · npm
interpretml/interpret
Fit interpretable models. Explain blackbox machine learning.
MITSep 17, 2026 · metrics 2.10.0
PyPI
mahmoud/boltons
🔩 Like builtins, but boltons. 250+ constructs, recipes, and snippets which extend (and rely on nothing but) the Python standard library. Nothing like Michael Bolton.
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
reactchartjs/react-chartjs-2
React components for Chart.js, the most popular charting library
MITOct 20, 2026 · metrics 2.10.0
npm
davidjbradshaw/iframe-resizer
Keep iframes sized to their content
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
external-secrets/external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
sysown/proxysql
High-performance proxy for MySQL and PostgreSQL
GPL-3.0Sep 20, 2026 · metrics 2.10.0
RubyGems
urbanadventurer/WhatWeb
Next generation web scanner
GPL-2.0Oct 24, 2026 · metrics 2.10.0
Go · npm
dominikh/go-tools
Staticcheck - The advanced Go linter
MITOct 21, 2026 · metrics 2.10.0
npm
sindresorhus/query-string
Parse and stringify URL query strings
MITSep 17, 2026 · metrics 2.10.0
PyPI
flask-restful/flask-restful
Simple framework for creating REST APIs
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
npm
matthew-andrews/isomorphic-fetch
Isomorphic WHATWG Fetch API, for Node & Browserify
MITSep 17, 2026 · metrics 2.10.0
Packagist
hyperf/hyperf
🚀 A coroutine framework that focuses on hyperspeed and flexibility. Building microservice or middleware with ease.
MITSep 19, 2026 · metrics 2.10.0