Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,050
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
—
OpenDroneMap/ODM
A command line toolkit to generate maps, point clouds, 3D models and DEMs from drone, balloon or kite images. 📷
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Maven
hibernate/hibernate-orm
Idiomatic persistence for Java and relational databases
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
petyosi/react-virtuoso
The most powerful virtual list component for React
No licenseOct 24, 2026 · metrics 2.10.0
npm
wakujs/waku
⛩️ The minimal React framework
MITOct 24, 2026 · metrics 2.10.0
npm
tailwindlabs/tailwindcss-typography
Beautiful typographic defaults for HTML you don't control.
MITSep 17, 2026 · metrics 2.10.0
Go
gobwas/ws
A tiny WebSocket library for Go.
MITOct 21, 2026 · metrics 2.10.0
—
sz3/libcimbar
Optimized implementation for color-icon-matrix barcodes
MPL-2.0Sep 18, 2026 · metrics 2.10.0
npm · Go · crates.io
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
MITOct 24, 2026 · metrics 2.10.0
npm · crates.io
voidzero-dev/vite-plus
The unified toolchain and entry point for web development.
MITOct 24, 2026 · metrics 2.10.0
npm · Packagist
RobinHerbots/Inputmask
Input Mask plugin
MITSep 17, 2026 · metrics 2.10.0
RubyGems
alexreisner/geocoder
Complete Ruby geocoding solution.
MITOct 24, 2026 · metrics 2.10.0
PyPI
tconbeer/harlequin
The SQL IDE for Your Terminal. Now with hsql, your agent's favorite sql client.
MITOct 2, 2026 · metrics 2.10.0
PyPI
gevent/gevent
Coroutine-based concurrency library for Python
Custom licenseOct 24, 2026 · metrics 2.10.0
crates.io
BLAKE3-team/BLAKE3
the official Rust and C implementations of the BLAKE3 cryptographic hash function
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
micronaut-projects/micronaut-core
Micronaut Application Framework
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Packagist
ratchetphp/Ratchet
Asynchronous WebSocket server
MITOct 24, 2026 · metrics 2.10.0
Go
wazero/wazero
wazero: the zero dependency WebAssembly runtime for Go developers
Apache-2.0Oct 24, 2026 · metrics 2.10.0
RubyGems
guard/guard
Guard is a command line tool to easily handle events on file system modifications.
MITOct 24, 2026 · metrics 2.10.0
npm
htmlstreamofficial/preline
Preline UI is an open-source set of prebuilt UI components based on the utility-first Tailwind CSS framework.
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
modelscope/FunClip
FunASR-powered video transcription, subtitle generation, and LLM-assisted clipping tool with a local Gradio UI.
MITOct 21, 2026 · metrics 2.10.0
npm
node-config/node-config
Node.js Application Configuration
Custom licenseSep 18, 2026 · metrics 2.10.0
—
davecgh/go-spew
Implements a deep pretty printer for Go data structures to aid in debugging
ISCOct 24, 2026 · metrics 2.10.0
RubyGems · npm
hanami/hanami
A flexible framework for maintainable Ruby apps
MITOct 24, 2026 · metrics 2.10.0
PyPI · Go · npm
BitterSecurity/Decepticon
Autonomous Hacking Agent for Red Team
Apache-2.0Oct 24, 2026 · metrics 2.10.0
Maven · npm
haifengl/smile
Statistical Machine Intelligence & Learning Engine
Custom licenseOct 24, 2026 · metrics 2.10.0
npm
anthropics/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Apache-2.0Oct 24, 2026 · metrics 2.10.0
PyPI · npm
harbor-framework/harbor
Framework for evaluating and improving agents
Apache-2.0Oct 24, 2026 · metrics 2.10.0
npm
melonjs/melonJS
a modern & lightweight HTML5 game engine
MITOct 24, 2026 · metrics 2.10.0
PyPI
argmaxinc/argmax-oss-swift
On-device Speech AI for Apple Silicon
MITOct 23, 2026 · metrics 2.10.0
PyPI
boto/boto
For the latest version of boto, see https://github.com/boto/boto3 -- Python interface to Amazon Web Services
Custom licenseOct 24, 2026 · metrics 2.10.0