Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,022
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
651B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Packagist
hyperf/hyperf
🚀 A coroutine framework that focuses on hyperspeed and flexibility. Building microservice or middleware with ease.
MITSep 19, 2026 · metrics 2.10.0
npm
olimorris/codecompanion.nvim
✨ AI Coding, Vim Style
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
unovue/reka-ui
An open-source UI component library for building high-quality, accessible design systems and web apps for Vue. Previously Radix Vue
MITOct 24, 2026 · metrics 2.10.0
Maven
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven
raphw/byte-buddy
Runtime code generation for the Java virtual machine.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
joe-bell/cva
Class Variance Authority
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · RubyGems
instructure/canvas-lms
The open LMS by Instructure, Inc.
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
—
RubyMetric/chsrc
chsrc 全平台通用换源工具与框架. Change Source everywhere for every software
GPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
pallets/werkzeug
The comprehensive WSGI web application library.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
Go
libp2p/go-libp2p
libp2p implementation in Go
MITSep 19, 2026 · metrics 2.10.0
—
InterceptSuite/ProxyBridge
Force Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic
MITOct 24, 2026 · metrics 2.10.0
crates.io
tokio-rs/tracing
Application level tracing for Rust.
MITSep 16, 2026 · metrics 2.10.0
PyPI
clearml/clearml
ClearML - Auto-Magical CI/CD to streamline your AI workload. Experiment Management, Data Management, Pipeline, Orchestration, Scheduling & Serving in one MLOps/LLMOps solution
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
nodejs/nodejs.org
The Node.js® Website
MITOct 24, 2026 · metrics 2.10.0
npm · RubyGems
chyingp/nodejs-learning-guide
Nodejs学习笔记以及经验总结，公众号"程序猿小卡"
Custom licenseOct 24, 2026 · metrics 2.10.0
NuGet
jstedfast/MailKit
A cross-platform .NET library for IMAP, POP3, and SMTP.
MITOct 20, 2026 · metrics 2.10.0
NuGet
PrismLibrary/Prism
Prism is a framework for building loosely coupled, maintainable, and testable XAML applications in WPF, Xamarin Forms, and Uno / Win UI Applications..
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
gpbl/react-day-picker
DayPicker is a customizable date picker component for React. Add date pickers, calendars, and date inputs to your web applications.
MITOct 20, 2026 · metrics 2.10.0
RubyGems
BetterErrors/better_errors
Better error page for Rack apps
MITOct 24, 2026 · metrics 2.10.0
crates.io · npm
dtolnay/cxx
Safe interop between Rust and C++
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
webclipper/web-clipper
For Notion,OneNote,Bear,Yuque,Joplin。Clip anything to anywhere
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · npm
Finsys/dockhand
Dockhand - Docker management you will like.
Custom licenseOct 22, 2026 · metrics 2.10.0
RubyGems
pry/pry
A runtime developer console and IRB alternative with powerful introspection capabilities.
Custom licenseOct 24, 2026 · metrics 2.10.0
Hex · npm
phoenixframework/phoenix_live_view
Rich, real-time user experiences with server-rendered HTML
MITOct 24, 2026 · metrics 2.10.0
npm
Choices-js/Choices
A vanilla JS customisable select box/text input plugin ⚡️
MITSep 17, 2026 · metrics 2.10.0
PyPI
NicolasHug/Surprise
A Python scikit for building and analyzing recommender systems
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
PyPI
ricequant/rqalpha
A extendable, replaceable Python algorithmic backtest && trading framework supporting multiple securities
Custom licenseOct 9, 2026 · metrics 2.10.0
PyPI
subzeroid/instagrapi
🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
npm · PyPI
oppia/oppia
A free, online learning platform to make quality education accessible for all.
Apache-2.0Sep 17, 2026 · metrics 2.10.0