Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
51,919
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
391B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.5.0 — a reference point for reading any individual result.
npm
microsoft/TypeScript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
Apache-2.0Aug 4, 2026 · metrics 2.5.0
npm
axios/axios
Promise based HTTP client for the browser and node.js
MITAug 4, 2026 · metrics 2.5.0
PyPI
fastapi/fastapi
FastAPI framework, high performance, easy to learn, fast to code, ready for production
MITAug 4, 2026 · metrics 2.5.0
Maven · npm
elastic/elasticsearch
Free and Open Source, Distributed, RESTful Search Engine
Custom licenseAug 1, 2026 · metrics 2.5.0
—
ocornut/imgui
Dear ImGui: Bloat-free Graphical User interface for C++ with minimal dependencies
MITAug 2, 2026 · metrics 2.5.0
PyPI
pallets/flask
The Python micro framework for building web applications.
BSD-3-ClauseAug 4, 2026 · metrics 2.5.0
npm
expressjs/express
Fast, unopinionated, minimalist web framework for node.
MITAug 4, 2026 · metrics 2.5.0
PyPI
scikit-learn/scikit-learn
scikit-learn: machine learning in Python
BSD-3-ClauseAug 4, 2026 · metrics 2.5.0
npm
webpack/webpack
A bundler for javascript and friends. Packs many modules into a few bundled assets. Code Splitting allows for loading parts of the application on demand. Through "loaders", modules can be CommonJs, AMD, ES6 modules, CSS, Images, JSON, Coffeescript, LESS, ... and your custom stuff.
MITAug 4, 2026 · metrics 2.5.0
npm
socketio/socket.io
Bidirectional and low-latency communication for every platform
MITAug 4, 2026 · metrics 2.5.0
npm · Packagist
coollabsio/coolify
An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers.
Apache-2.0Aug 3, 2026 · metrics 2.5.0
PyPI · npm
MemPalace/mempalace
The best-benchmarked open-source AI memory system. And it's free.
MITAug 3, 2026 · metrics 2.5.0
PyPI
Textualize/rich
Rich is a Python library for rich text and beautiful formatting in the terminal.
MITAug 4, 2026 · metrics 2.5.0
PyPI
soimort/you-get
:arrow_double_down: Dumb downloader that scrapes the web
Custom licenseJul 31, 2026 · metrics 2.5.0
PyPI
psf/requests
A simple, yet elegant, HTTP library.
Apache-2.0Aug 4, 2026 · metrics 2.5.0
npm
prettier/prettier
Prettier is an opinionated code formatter.
MITAug 4, 2026 · metrics 2.5.0
npm
TanStack/query
🤖 Powerful asynchronous state management, server-state utilities and data fetching for the web. TS/JS, React Query, Solid Query, Svelte Query and Vue Query.
MITJul 29, 2026 · metrics 2.5.0
npm
bigskysoftware/htmx
</> htmx - high power tools for HTML
Custom licenseAug 2, 2026 · metrics 2.5.0
npm
iamkun/dayjs
⏰ Day.js 2kB immutable date-time library alternative to Moment.js with the same modern API
MITAug 4, 2026 · metrics 2.5.0
npm · Go
serverless/serverless
⚡ Serverless Framework – Effortlessly build apps that auto-scale, incur zero costs when idle, and require minimal maintenance using AWS Lambda and other managed cloud services.
Custom licenseJul 31, 2026 · metrics 2.5.0
npm
RocketChat/Rocket.Chat
The Secure CommsOS™ for mission-critical operations
Custom licenseAug 1, 2026 · metrics 2.5.0
npm
react-hook-form/react-hook-form
📋 React Hooks for form state management and validation (Web + React Native)
MITAug 4, 2026 · metrics 2.5.0
npm
colinhacks/zod
TypeScript-first schema validation with static type inference
MITAug 4, 2026 · metrics 2.5.0
PyPI
agno-agi/agno
Build, run, and manage agent platforms.
Apache-2.0Jul 30, 2026 · metrics 2.5.0
PyPI
luongnv89/claude-howto
A visual, example-driven guide to Claude Code — from basic concepts to advanced agents, with copy-paste templates that bring immediate value.
MITJul 29, 2026 · metrics 2.5.0
Go · npm
schollz/croc
Easily and securely send things from one computer to another :crocodile: :package:
MITJul 29, 2026 · metrics 2.5.0
Go · npm
mattermost/mattermost
Mattermost is an open source platform for secure collaboration across the entire software development lifecycle..
Custom licenseAug 3, 2026 · metrics 2.5.0
PyPI
datalab-to/marker
Convert PDF to markdown + JSON quickly with high accuracy
Apache-2.0Aug 1, 2026 · metrics 2.5.0
—
hyprwm/Hyprland
Hyprland is an independent, highly customizable, dynamic tiling Wayland compositor that doesn't sacrifice on its looks.
BSD-3-ClauseJul 29, 2026 · metrics 2.5.0
npm
markedjs/marked
A markdown parser and compiler. Built for speed.
Custom licenseAug 4, 2026 · metrics 2.5.0