Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,034
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
RubyGems
Compass/compass
Compass is no longer actively maintained. Compass is a Stylesheet Authoring Environment that makes your website design simpler to implement and easier to maintain.
Custom licenseOct 24, 2026 · metrics 2.10.0
PyPI
mesonbuild/meson
The Meson Build System
Apache-2.0Oct 24, 2026 · metrics 2.10.0
—
chuspeeism/dashi-ppt-skill
An AI-agent skill that generates browser-editable presentations from multiple visual themes, exportable to HTML, PDF, and PPTX.
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
—
OISF/suricata
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
GPL-2.0Sep 18, 2026 · metrics 2.10.0
—
erincatto/box3d
Box3D is a 3D physics engine for games
MITOct 20, 2026 · metrics 2.10.0
npm
iorate/ublacklist
Blocks specific sites from appearing in Google search results
MITSep 19, 2026 · metrics 2.10.0
RubyGems
microsoft/FASTER
Fast persistent recoverable log and key-value store + cache, in C# and C++.
MITOct 24, 2026 · metrics 2.10.0
npm
nodeca/js-yaml
JavaScript YAML parser and dumper. Very fast.
MITSep 16, 2026 · metrics 2.10.0
PyPI
scikit-image/scikit-image
Image processing in Python
Custom licenseOct 24, 2026 · metrics 2.10.0
Maven
hazelcast/hazelcast
Hazelcast is a unified real-time data platform combining stream processing with a fast data store, allowing customers to act instantly on data-in-motion for real-time insights.
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
cowrie/cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist · PyPI
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
AGPL-3.0Oct 24, 2026 · metrics 2.10.0
PyPI
linkedin/Liger-Kernel
Efficient Triton Kernels for LLM Training
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm · PyPI
Flagsmith/flagsmith
Flagsmith is an open-source feature flag platform with remote config, experimentation, and self-hosted or cloud deployment options.
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
npm
hovancik/stretchly
The break time reminder app
BSD-2-ClauseOct 24, 2026 · metrics 2.10.0
npm
ipfs/ipfs-desktop
An unobtrusive and user-friendly desktop application for IPFS on Windows, Mac and Linux.
MITOct 19, 2026 · metrics 2.10.0
Go
xataio/pgroll
PostgreSQL zero-downtime migrations made easy
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
kvcache-ai/Mooncake
Mooncake is the serving platform for Kimi, a leading LLM service provided by Moonshot AI.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
palera1n/palera1n
Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher.
MITOct 24, 2026 · metrics 2.10.0
Packagist
symfony/translation
Provides tools to internationalize your application
MITOct 20, 2026 · metrics 2.10.0
PyPI
pytransitions/transitions
A lightweight, object-oriented finite state machine implementation in Python with many extensions
MITSep 17, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/global-state
Snapshotting of global state, factored out of PHPUnit into a stand-alone component
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
RubyGems
busyloop/lolcat
Rainbows and unicorns!
BSD-3-ClauseOct 24, 2026 · metrics 2.10.0
Maven
arrow-kt/arrow
The perfect companion for your Kotlin journey - Inspired by functional, data-oriented and concurrent programming
Custom licenseOct 24, 2026 · metrics 2.10.0
RubyGems
kkuchta/css-only-chat
A truly monstrous async web chat using no JS whatsoever on the frontend
MITOct 24, 2026 · metrics 2.10.0
Packagist
roots/bedrock
WordPress boilerplate with Composer and Git, easier configuration, and an improved folder structure
MITOct 24, 2026 · metrics 2.10.0
Go · PyPI
open-telemetry/opentelemetry-go
OpenTelemetry Go API and SDK
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
DATA-DOG/go-sqlmock
Sql mock driver for golang to test database interactions
Custom licenseOct 24, 2026 · metrics 2.10.0
Packagist
sebastianbergmann/version
Library that helps with managing the version number of Git-hosted PHP projects
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
npm
orval-labs/orval
orval is able to generate client with appropriate type-signatures (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification, either in yaml or json formats. 🍺
MITOct 24, 2026 · metrics 2.10.0