Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,175
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
chemist/ksonnet
A CLI-supported framework that streamlines writing and deployment of Kubernetes configurations to multiple clusters.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
chinaerserver/getty
a netty like asynchronous network I/O library based on tcp/udp/websocket; a bidirectional RPC framework based on JSON/Protobuf; a microservice framework based on zookeeper/etcd
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
chitoku-k/bosh_exporter
BOSH Prometheus Exporter
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
chrisns/sandbox-probe
Agentic sandbox enumeration: find security issues, and seed escape automation.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
chrissnell/polymur
A fast and flexible Graphite relay + HTTPS forwarder toolset
No licenseSep 19, 2026 · metrics 2.10.0
Go
chrisvaughn/f1viewer
🏎️ TUI for F1TV
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
chuangmaoye/sftp
SFTP support for the go.crypto/ssh package
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
Go
clambin/go-common
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
cloudfoundry-attic/consul
Consul is a tool for service discovery, monitoring and configuration.
MPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
codegiveness/umans-gate
LLM capture proxy with Anthropic cache_control TTL stamping, vision handoff, concurrency gating, rate limiting, and a live inspection dashboard
MITSep 18, 2026 · metrics 2.10.0
Go
codemonstersteam/pinout-asyncapi
AsyncAPI 3.0 contract validator. A module of the pinout ecosystem for validating contracts between services based on their specifications.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
RubyGems
colmexdev/ratonvirus-clamby
Clamby scanner for Ratonvirus.
MITSep 20, 2026 · metrics 2.10.0
Go
const-tmp/gorm-cruder
Golang generic CRUD helper
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
cryptopay-dev/narada
Golang application framework
MITSep 18, 2026 · metrics 2.10.0
Go
cryptopossum/fantom-api-graphql
Fast and secure GraphQL API for aggregated Opera block chain information.
MITSep 20, 2026 · metrics 2.10.0
Maven
cucumber/messages-java
[READ ONLY] Cucumber Messages for Java (Protocol Buffers) - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/messages
MITSep 19, 2026 · metrics 2.10.0
Go
cyradin/golang-evdev
Go bindings for the linux input subsystem
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
d2iq-archive/tf-kubernetes-configmap-backend
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
danquack/external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
daodaoliang/maddy
✉️ Composable all-in-one mail server.
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
daosvik/uint256
Fixed size 256-bit math library
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Go
dapi/memory-bank-cli
CLI for installing, updating, validating, and diagnosing Memory Bank templates
No licenseSep 18, 2026 · metrics 2.10.0
Go
darashenka/gocloak
golang keycloak client
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
darkowlzz/csi-lib-utils
Common code for Kubernetes CSI sidecar containers (e.g. `external-attacher`, `external-provisioner`, etc.)
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
datafuse-extras/bincode
A binary encoder / decoder implementation in Rust.
MITSep 20, 2026 · metrics 2.10.0
crates.io
datafuse-extras/csv-async
CSV parsing in async context
MITSep 20, 2026 · metrics 2.10.0
—
dataops-sre/kafka-kit
Kafka data mapping and recovery tools
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
daxartio/anygo
Rust-like error handling in Go
MITSep 19, 2026 · metrics 2.10.0
Go
dbhq/discordgo
(Golang) Go bindings for Discord
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
deBarrosS/openapi-go
OpenAPI structures for Go
MITSep 19, 2026 · metrics 2.10.0