Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
98,287
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
650B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
Go
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
No licenseSep 16, 2026 · metrics 2.10.0
—
xapi-project/stdext
Xenserver's (deprecated) extensions to the ocaml standard library
Custom licenseSep 13, 2026 · metrics 2.10.0
Packagist
yiisoft/psr-dummy-provider
Dummy PSR provider
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
—
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
MITSep 20, 2026 · metrics 2.10.0
npm
zertosh/eslint-plugin-no-async-without-await
Enforce that async functions use await
No licenseOct 18, 2026 · metrics 2.10.0
crates.io
0xMiden/p3-miden
Miden-specific Plonky3-based crates
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Maven
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Maven
1c-syntax/utils
No repository description published.
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
crates.io
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
AndroidPoet/revenuecat-cli
Fast, lightweight, and scriptable CLI for RevenueCat
MITSep 17, 2026 · metrics 2.10.0
PyPI
B4DCATs/openvpn_exporter
🔒 Secure Prometheus exporter for OpenVPN servers with IP access control, comprehensive monitoring, and Grafana dashboard
Apache-2.0Oct 12, 2026 · metrics 2.10.0
Hex
BrandtHill/Salchicha
An Elixir NaCl/libsodium-lite Salsa20/ChaCha20 encryption tool
MITSep 18, 2026 · metrics 2.10.0
PyPI
CyrusBiotechnology/dj-bioinformatics-protein
Django utilities and tools for protein storage and manipulation
MITOct 22, 2026 · metrics 2.10.0
Go
Delni/preflight
Automate checklist to ensure you are ready to go
MITSep 12, 2026 · metrics 2.10.0
npm · NuGet
DigitalMomentum/Umbraco-Videolizer
A Datatype for pasting in Youtube / Vimeo URLs and embeding them into your site
MITOct 22, 2026 · metrics 2.10.0
npm
DjonnyX/ng-virtual-scroll-view
High-performance virtual scroll container for Angular
MITSep 15, 2026 · metrics 2.10.0
—
EngoEngine/math
Fork of luxengine/math which is now moved
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
Exeteres/wg-feed
wg-feed is a draft protocol and reference implementation for distributing WireGuard tunnel configurations via subscription URLs
MITSep 12, 2026 · metrics 2.10.0
—
FastReports/winforms-datavisualization
System.Windows.Forms.DataVisualization provides basic charting for WinForms applications.
MITSep 15, 2026 · metrics 2.10.0
RubyGems
Fodoj/acts-as-taggable-on
A tagging plugin for Rails applications that allows for custom tagging along dynamic contexts.
MITOct 18, 2026 · metrics 2.10.0
RubyGems
KJTsanaktsidis/extconf_compile_commands_json
Generate clangd compile_commands.json files for gems
MITSep 11, 2026 · metrics 2.10.0
Packagist
Laravel-Lang/status-generator
Translation status generator for Laravel Lang projects.
MITOct 20, 2026 · metrics 2.10.0
PyPI
Lightning-Universe/Slack-Command-Bot-component
With this component you can create a Slack bot and enable interactivity with the Slash Commands.
Apache-2.0Sep 11, 2026 · metrics 2.10.0
NuGet
MarkusEggerInc/CODEFrameworkCore
CODE Framework for .NET Core
MITOct 3, 2026 · metrics 2.10.0
npm
MetaMask/snap-tron-wallet
Tron wallet snap
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm
MetaMask/snap-watch-only
No repository description published.
Apache-2.0Sep 28, 2026 · metrics 2.10.0
npm
MetaMask/swappable-obj-proxy
No repository description published.
No licenseSep 28, 2026 · metrics 2.10.0
—
NDari/gocrunch
High performance numeric library in Go
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
NextPKI/certscan
Auto-discovery agent for TLS certificates. Scans your local IPv4/IPv6 network and static hosts for HTTPS, SMTPS, IMAPS, and more. Reports certificate metadata via Webhook. Supports TLS, STARTTLS, SNI, and protocol tagging. You can't protect what you don't know you have.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
PostHog/posthog-rrweb
a complete copy of rrweb allowing us to vary CI
MITSep 15, 2026 · metrics 2.10.0