Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,034
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Maven
quartz-scheduler/quartz
Code for Quartz Scheduler
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go
grpc-ecosystem/go-grpc-middleware
Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Go · Maven · npm
x402-foundation/x402
A payments protocol for the internet. Built on HTTP.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm · Packagist
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
superagent-ai/superagent
Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.
MITSep 20, 2026 · metrics 2.10.0
npm
steipete/summarize
Point at any URL/YouTube/Podcast or file. Get the gist. CLI and Chrome Extension.
MITOct 24, 2026 · metrics 2.10.0
PyPI
aws/aws-sam-cli
CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io · npm · PyPI
google-ai-edge/LiteRT-LM
LiteRT-LM is Google's production-ready, high-performance, open-source inference framework for deploying Large Language Models on edge devices.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
doctrine/annotations
Annotations Docblock Parser
MITOct 24, 2026 · metrics 2.10.0
PyPI
pre-commit/pre-commit-hooks
Some out-of-the-box hooks for pre-commit
MITOct 24, 2026 · metrics 2.10.0
RubyGems
ankane/searchkick
Intelligent search made easy
MITOct 24, 2026 · metrics 2.10.0
npm
vuejs/language-tools
⚡ High-performance Vue language tooling based-on Volar.js
MITSep 17, 2026 · metrics 2.10.0
Go · PyPI
btcsuite/btcd
An alternative full node bitcoin implementation written in Go (golang)
ISCOct 22, 2026 · metrics 2.10.0
Go
spf13/afero
The Universal Filesystem Abstraction for Go
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
antvis/X6
🚀 JavaScript diagramming library that uses SVG and HTML for rendering.
MITSep 15, 2026 · metrics 2.10.0
Maven · npm
apache/storm
Apache Storm
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven
pig-mesh/pig
↥ ↥ ↥ Follow for updates An RBAC permission management system based on Spring Cloud 2025, Spring Boot 4, and OAuth2.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
SawyerHood/dev-browser
A Claude Skill to give your agent the ability to use a web browser
MITOct 24, 2026 · metrics 2.10.0
—
redis/hiredis
Minimalistic C client for Redis >= 1.2
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
npm
TanStack/form
🤖 Headless, performant, and type-safe form state management for TS/JS, React, Vue, Angular, Solid, and Lit.
MITSep 15, 2026 · metrics 2.10.0
NuGet
pardeike/Harmony
A library for patching, replacing and decorating .NET and Mono methods during runtime
MITOct 8, 2026 · metrics 2.10.0
npm
antvis/Infographic
🦋 An Infographic Generation and Rendering Framework, bring words to life with AI!
MITSep 18, 2026 · metrics 2.10.0
npm
standardnotes/app
Think fearlessly with end-to-end encrypted notes and files. For issues, visit https://standardnotes.com/forum or https://standardnotes.com/help.
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
PyPI
ibis-project/ibis
the portable Python dataframe library
Apache-2.0Oct 24, 2026 · metrics 2.10.0
crates.io · PyPI
python-pendulum/pendulum
Python datetimes made easy
MITOct 24, 2026 · metrics 2.10.0
npm · Maven
react-native-device-info/react-native-device-info
Device Information for React Native iOS and Android
MITSep 15, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/code-unit-reverse-lookup
Looks up which function or method a line of code belongs to
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
Packagist
thephpleague/oauth2-server
A spec compliant, secure by default PHP OAuth 2.0 Server
MITOct 20, 2026 · metrics 2.10.0
npm · crates.io
automerge/automerge
A JSON-like data structure (a CRDT) that can be modified concurrently by different users, and merged again automatically.
MITOct 20, 2026 · metrics 2.10.0
crates.io
dtolnay/anyhow
Flexible concrete Error type built on std::error::Error
Apache-2.0Sep 16, 2026 · metrics 2.10.0