Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
59,590
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
445B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.7.0 — a reference point for reading any individual result.
npm
lobehub/lobehub
🤯 LobeHub is your Chief Agent Operator, organizing your agents into 7×24 operations by hiring, scheduling, and reporting on your entire AI team.
Custom licenseAug 20, 2026 · metrics 2.7.0
Go
cockroachdb/cockroach
CockroachDB — the cloud native, distributed SQL database designed for high availability, effortless scale, and control over data placement.
Custom licenseAug 16, 2026 · metrics 2.7.0
crates.io
wezterm/wezterm
A GPU-accelerated cross-platform terminal emulator and multiplexer written by @wez and implemented in Rust
Custom licenseAug 13, 2026 · metrics 2.7.0
PyPI · npm
locustio/locust
Write scalable load tests in plain Python 🚗💨
MITAug 20, 2026 · metrics 2.7.0
PyPI · npm
invoke-ai/InvokeAI
Invoke is a leading creative engine for Stable Diffusion models, empowering professionals, artists, and enthusiasts to generate and create visual media using the latest AI-driven technologies. The solution offers an industry leading WebUI, and serves as the foundation for multiple commercial products.
Apache-2.0Aug 16, 2026 · metrics 2.7.0
Go
trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
AGPL-3.0Aug 13, 2026 · metrics 2.7.0
npm
onlook-dev/onlook
The Cursor for Designers • An Open-Source AI-First Design tool • Visually build, style, and edit your React App with AI
Apache-2.0Aug 17, 2026 · metrics 2.7.0
PyPI
argotorg/solidity
Solidity, the Smart Contract Programming Language
GPL-3.0Aug 13, 2026 · metrics 2.7.0
Go
OpenListTeam/OpenList
A new AList Fork to Anti Trust Crisis
AGPL-3.0Aug 17, 2026 · metrics 2.7.0
crates.io · npm
rome/tools
Unified developer tools for JavaScript, TypeScript, and the web
MITAug 14, 2026 · metrics 2.7.0
Go · crates.io
getsops/sops
Simple and flexible tool for managing secrets
MPL-2.0Aug 17, 2026 · metrics 2.7.0
—
doomemacs/core
An Emacs framework for the stubborn martian hacker
MITAug 15, 2026 · metrics 2.7.0
crates.io
ratatui/ratatui
A Rust crate for cooking up terminal user interfaces (TUIs) 👨🍳🐀 https://ratatui.rs
MITAug 13, 2026 · metrics 2.7.0
npm
apollographql/apollo-client
The industry-leading GraphQL client for TypeScript, JavaScript, React, Vue, Angular, and more. Apollo Client delivers powerful caching, intuitive APIs, and comprehensive developer tools to accelerate your app development.
MITAug 20, 2026 · metrics 2.7.0
crates.io
transact-rs/sqlx
🧰 The Rust SQL Toolkit. An async, pure Rust SQL crate featuring compile-time checked queries without a DSL. Supports PostgreSQL, MySQL, and SQLite.
Apache-2.0Aug 13, 2026 · metrics 2.7.0
Go
ent/ent
An entity framework for Go
Apache-2.0Aug 17, 2026 · metrics 2.7.0
Maven
ceph/ceph
Ceph is a distributed object, block, and file storage platform
Custom licenseAug 18, 2026 · metrics 2.7.0
Go
dgraph-io/badger
Fast key-value DB in Go.
Apache-2.0Aug 15, 2026 · metrics 2.7.0
npm · PyPI
eigent-ai/eigent
Eigent: The Open Source Cowork Desktop - Local and Free Alternative to Claude Cowork and Codex
Apache-2.0Aug 16, 2026 · metrics 2.7.0
Maven
mamoe/mirai
高效率 QQ 机器人支持库
AGPL-3.0Aug 15, 2026 · metrics 2.7.0
PyPI · crates.io
maurosoria/dirsearch
Web path scanner
No licenseAug 19, 2026 · metrics 2.7.0
Go
thanos-io/thanos
Highly available Prometheus setup with long term storage capabilities. A CNCF Incubating project.
Apache-2.0Aug 16, 2026 · metrics 2.7.0
—
earthtojake/text-to-cad
A library of agent skills for CAD, CAE and CAM
MITAug 15, 2026 · metrics 2.7.0
npm
element-hq/element-web
A glossy Matrix collaboration client for the web.
AGPL-3.0Aug 13, 2026 · metrics 2.7.0
Go
crossplane/crossplane
The Cloud Native Control Plane
Apache-2.0Aug 17, 2026 · metrics 2.7.0
crates.io
GitoxideLabs/gitoxide
An idiomatic, lean, fast & safe pure Rust implementation of Git
Apache-2.0Aug 18, 2026 · metrics 2.7.0
Packagist
walkor/workerman
An asynchronous event driven PHP socket framework. Supports HTTP, Websocket, SSL and other custom protocols.
MITAug 13, 2026 · metrics 2.7.0
NuGet
chocolatey/choco
Chocolatey - the package manager for Windows
Custom licenseAug 19, 2026 · metrics 2.7.0
npm
lidge-jun/opencodex
Universal provider proxy for OpenAI Codex & Claude Code — use any LLM (Claude, Gemini, Grok, DeepSeek, Ollama…) with Codex CLI, App, SDK, and Claude Code
MITAug 20, 2026 · metrics 2.7.0
PyPI · Go
LMCache/LMCache
LMCache: Supercharge Your LLM with the Fastest KV Cache Layer
Apache-2.0Aug 15, 2026 · metrics 2.7.0