Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
97,607
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
649B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
PyPI
kdmccormick/tutor
The docker-based Open edX distribution designed for peace of mind
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
crates.io · PyPI
keep-starknet-strange/cairo-vm
cairo-rs is a Rust implementation of the Cairo VM. Cairo (CPU Algebraic Intermediate Representation) is a programming language for writing provable programs, where one party can prove to another that a certain computation was executed correctly. Cairo and similar proof systems can be used to provide scalability to blockchains.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
kejace/go-ethereum
Jeffrey Wilcke's Go implementation of the Ethereum y/w paper
LGPL-3.0Oct 23, 2026 · metrics 2.10.0
Maven
kestros/kestros-root-project
Base Kestros project build manager. Contains dependency and plugin versions for building and installing Bundles and Packages to Kestros instances.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
—
kevinburke/justrun
A tool that watches files, and runs possibly long-lived commands when they change.
MITOct 21, 2026 · metrics 2.10.0
—
kevinushey/rstudio
RStudio is an integrated development environment (IDE) for R
Custom licenseSep 14, 2026 · metrics 2.10.0
—
kevinwern/git
Git Source Code Mirror - This is a publish-only repository and all pull requests are ignored. Please follow Documentation/SubmittingPatches procedure for any of your improvements.
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
keystroke3/websocket
Minimal and idiomatic WebSocket library for Go
MITOct 19, 2026 · metrics 2.10.0
RubyGems
kheang/active_merchant
Active Merchant is a simple payment abstraction library extracted from Shopify. The aim of the project is to feel natural to Ruby users and to abstract as many parts as possible away from the user to offer a consistent interface across all supported gateways.
MITSep 14, 2026 · metrics 2.10.0
Go
kholisrag/do-firewall-allowlister
DigitalOcean Firewall Allowlister
MITSep 19, 2026 · metrics 2.10.0
Go
khorevaa/logn
a log framework, a wrap of zap, like log4j
MITSep 19, 2026 · metrics 2.10.0
Go
khuangyl/rtcp
A Go implementation of RTCP
MITSep 19, 2026 · metrics 2.10.0
Go
khulnasoft/terraform-provider-postgresql
Terraform PostgreSQL provider
MPL-2.0Oct 20, 2026 · metrics 2.10.0
Go
kianelbo/subgo
Library and CLI for subtitle files
MITSep 19, 2026 · metrics 2.10.0
Go
kibamail/kibaship
No repository description published.
No licenseOct 23, 2026 · metrics 2.10.0
Go
kibsoft/Xray-core
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
MPL-2.0Sep 12, 2026 · metrics 2.10.0
npm
kid1412621/vscode-icons
Icons for Visual Studio Code
MITSep 13, 2026 · metrics 2.10.0
Go
kidzen/noti
Monitor a process and trigger a notification.
MITSep 19, 2026 · metrics 2.10.0
Go
killianmuldoon/cluster-api
Home for the Cluster Management API work, a subproject of sig-cluster-lifecycle
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist
kimhemsoe/orm
Doctrine Object Relational Mapper (ORM)
MITOct 19, 2026 · metrics 2.10.0
—
king526/errors
Simple error handling primitives
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
Go
kingdonb/chroma
A general purpose syntax highlighter in pure Go
MITSep 19, 2026 · metrics 2.10.0
npm
kinkoazc/gmail.js
Gmail JavaScript API
MITSep 15, 2026 · metrics 2.10.0
Go
kkty/tengo
A fast script language for Go
MITSep 19, 2026 · metrics 2.10.0
—
knkski/burrow
Hyperledger Burrow
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
koenpunt/imgproxy
Fast and secure standalone server for resizing and converting remote images
MITOct 18, 2026 · metrics 2.10.0
crates.io
kohensu/wasm-pack
📦✨ your favorite rust -> wasm workflow tool!
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
kokizzu/fiber
🚀 Fiber is an Express.js inspired web framework written in Go 🐿️
MITOct 23, 2026 · metrics 2.10.0
Go
kokizzu/go-edlib
Golang string comparison and edit distance algorithms library, featuring : Levenshtein, LCS, Hamming, Damerau levenshtein (OSA and Adjacent transpositions algorithms), Jaro-Winkler, Cosine, etc...
MITSep 19, 2026 · metrics 2.10.0
Go
kokizzu/go-guardian
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
MITSep 19, 2026 · metrics 2.10.0